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Coping With COMPUTIST 



; 



Welcome to COMPUTIST. a publication 
devoted to the serious iiyier of Apple ]| and 
Apple j( compatible; computers. Our mttgazine 
conlain.s infomwtiori yon are not likely to find 
in any ol the other major journals dedicated to 
the Apple market. 

New readers arc advised to read this page 
carefully to avoid frustration when attetnpting 
to foUuw a softkey or when entering the 
programs primed in this issue. 

■ WKat Is A Softkey Anyway? Softkey is 

a tcnn which we coined to describe a procedure 

that removes, or at least circumvents, any eopy- 
proteclion on a particular tiisk. Once a softkey 

procedure has been performed, the resulting 
disk can usually be copied by Lhe use of Apple's 
COPYA program (on the DOS ."5.3 Sy.stem 
Master Disk). 

■ Cummanrts And Controls: in any article 

appcattng in COMPUTIST, commands which 
a reader is required to perform arc set apart by 
being in boldface and indented: 



i,\ 



The 1RETUW<| key must fae pressed at the end of 
every such command unless otherwise 
s pec i Red. 
Control characters are specially boxed; 

Press [6J. Next, place one finger on [Ctrl) 
and press [P]. Kemember to enter this 
command line by pressing (rcturn). 

■ Rc(juirciiiciils: COMPUTIST programs 
and softkeys require one of the Apple ][ series 
of computers and a disk drive with DOS 3.3. 
These and other special needs are listed at the 
beginning of the article under "Requirements', 

■ Software Recommendations; 

1) Applesofi fro^rum tdiior such as Global 
Program Line Editor (GPLE), 

2) Secioi- Ediior such as DiskEdit ( from the 
Book of Softkeys vol I) or ZAP from Bag of 
Tneks. 

i) Disk Search Utiliiy such as The 
Inspector. The CIA or The CORK Disk 
Searcher (from the Book of .Softkeys vol Ul) 

4i Assembler such as the S-C Assembler 
from S-C software or Merlin /Big Mac 

5/ Uit Copy Frog ram such as Copy || Plus. 
Locksmith or The Essential Data Duplicator 

6^ Te.vr Editor (that produces normal 
sequential text files} such as Applewriter IL 
Magic Window tl or Screenwriter 11. 

COPYA. FID and MUFFIN from the DOS 
3.;^ System Master Disk are also useful. 

■ Super lOB: This powerftil deprotection 
utility (CO.MPUTIST 32) and its various 
controllers are used in many softkeys. This 
Utility is now available on each Super lOB 
Collection disk. 

■ RESET Into The Monitor; Softkeys 
occasionally require the user to stop the 
execution of a copy-protected program and 
directly enter the Apple's system monitor. 
Cheek the following list to see what hardware 
you will need to obtain this ability. 



Apple II Plus - Apple He ■ Apple compatibles: 
I) Place an Integer BASIC ROM card in one 
of the .Apple slots. 2) Use a non-maskable 
inleiTupt (NMI) card such as Replay or 
Wildcard. 

Apple II Plus - Apple compailbles: I) Install 
an F8 ROM with a modified RESET vector on 
the computer's motherboard as detailed in the 
■'Modified ROM's" article (COMPUTIST 6 
or Book Of Softkeys III) or the "Dual ROM's" 
article f COMPUTIST 19). 

Apple lie - Apple He: Install a modified CD 
ROM on the computer's molhcrhoard. Culling 
Edge £nt. (Box 43234 Ren Cen Slalion-Hc" 
Detroit. Ml 48243) sells a hardware device 
that will give you this important ability but it 
will void an Apple //c warranty. 

■ Recommended Literature: The Apple || 
Reference Manual and DOS 3,3 manual are 
musts for any serious Apple user. Other helpful 
books include: Beneuth Apple DOS, Don Worth 
and Pieter Lechner, Quality Softw.ire: Assi'nihh 
Language For The Applesoft Frogrammer. Roy 
Meyers and C.W. Finley. Addison Wesley; and 
What's Wiere In The Apple. William Lubcrt. 
Micro Ink. 

■ Keying In Applesofi Programs: BASIC 
programs are printed in COMPUTIST in a 
format that is designed to minimize errors for 
readers who key in these programs. If yoti t^'pe: 

IBHOME:REMCLEAR SCREEN 
The LIST will look like: 

1ft HOME : REM CLEAR SCREEN 

because Applesoft inserts spaces into a program 
listing before and after every command word 
or mathematical operator. These spaces usually 
don't pose a problem except in line numbers 
which contain REM or DATA commands. 
There :ire two types, of spaces: those that have 
to be keyed and those that don't. Spaces that 
must be keyed in appear in COMPUTIST as 
delta characters ('' ), .'\ll other spaces are there 
for easier reading. NOTE: If you want your 
checksums (See "Computing Checksums" 
section) to match up, you must only key in 
(' ) spaces after DATA statements. 

■ Keying In Hexdumps: Machine language 
programs are printed in COMPUTIST as both 
source code and hexdumps. Hexdumps are the 
shortest and easiest format to type in. You niust 
first enter the irtonitor: 

CALL -l&^ 

Key in the hcxdunip exactly as it appears in 
the maga/.inc, ignoring the four-digit checksum 
at the end of each line (a "%" and lour digits). 
A beep means you have typed something that 
the monitor didn't understand and must, 
therefore, retype that line. 

When finished, return to BASIC with; 

E«03(; 



BSAVE the 


jron- 


address and 


article. 




■ Keying Ii 


is printed to 1 


To key it in. 


i 

r 



Without this assembler, you will have to 
translate pieces of the source code into 
something your assembler will understand. A 
tfible of S-C Assembler directives appears in 

coMPurisr \i. 

■ Computing Cheekiums Checksums are 
four-digit hexadecimal numbers which tell if 
you keyed a program exactly ais it appears in 
COMPUTIST. There arc two types of 
checksums; one created b> the CHECKBIN 
program (lor machine language programs) and 
the other credited by the CHECKSOFT program 
(for BASIC programs). Both appeared in 
COMPUTIST 1 and The Be^i of Hardcore 
CoraputiuK. An update to CHECKSOFT 
appeared in COMPUTLST IK. If the published 
checksums do not match those created by your 
computer, then you typed the program 
incorrectly. The line where the first checksum 
differs has an crnw. 

■ CHECKSOFl Instructions: 

LOAD filename 
BRUNCHECKSOFT 



Gel [he checksums witli: &tRElJmJ and correct 
the program where the checksums differ. 
■ CHECKBIN Instructions: 

CALL -151 

BLOAD iiri>gm/ii filfiianu- 

Install CHECKBIN at an oui of die way place 

BRUN CHECKBIN.A$6efl(t 

Get the checksums by typing the starting 

address, a period and ending address of the file 
followed by a B'V] \ mum\ . 



xxx.xxxlLJY] 
Correa the lines at which the checksums differ. 
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You have a LEGAL RIGHT 
to an unlocked backup copy 

Out editorial policy is ttiat we da NOT condone 
Eoftwarc piracy, but we do t>atleve that usare ar« entitled 
to bacKup commercial dishs tttey have purctiased. In 
addllion ta Ilia security of a tiackup disk, ttie temoval 
of copyprotection gives the user Ihe opiior ol 
modifying programs to rneet his or her needs. 

Furtherraare, the copyright laws guarantee your 
right to such <i DEPROTECTEO backup copy: 

"]\ \\ nni .in inl'rinj^e!nii?ni ^^l|■ rriL- owTUir ol' :t CiT^\ lij' j 

cimtpuicr prDfram lo mukt iii ;iiiihiin/t ifiir mailing of anmlicr 
copy >kr ffdaptadoii of rliiit foiiipin^'r prognm pn^vieJcd' 

I f ths* such Q new copy or iklaplatiort h trcatcJ its an c>>crvtiaJ 
iXip in ttie urilizatiqji t>t [tie.cemputcrF prvgr^m in ganjUnctinn with 
^ ni»[!hint: and lh(i[.tl a> uiai lii eeii iichcj it]di[[it:F. ar 

2) lliM such newcopy or iidiiptjrim u fur orchiviil purpnsei 
only afid iharatl archival topiciarc dKiro^cci in Ihc ovcm thai 
continued possLCfisiofi i>( the camputcr program ihtsuld cssac io 
Ik rialilliil. 

Aw^ i.>j^jui. LXipiti^ pn^iimcd iii accufiMce vuitti: flic provi^igns 

iii Ihi?. M:uniin muv he li!:]>£d. f^t\d. lir iFthcr^viM: t[iin^it;rn:d. ^l!I)^ 

— ™i'|ral tmK'.'np:ffl 

.'in ik prugram. 

M\y with Ihe 
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Be assured of receiving the latest issue of COMPUTIST each month 
without the hassle of making a trek to the local computer store and not finding 
COMPUTIST SO of course you ask the clerk if they have COMPUTIST and they tell you they don't 
carry COMPUTIST but maybe you could try the computer store down the block because they might have an issue of 
COMPUTIST so you go to the computer store down the b!ocK and asK them if they have COMPUTIST but of course they don't (they just ran out of 

COMPUTIST yesterday) so yoL ride your unicycle clear across lown to see if the computer store across town fias COMPUTIST but wiien you go inside and ask for COMPUTiST 

mey don't tiave COWIPUTIST either and suggest that you try the store you originslly went to in Ihs first place sn you anri trp ootng homo disguslGd thai you nnissod anolhor issue dI COMPUTIST. 

Can't Find COMPUTIST Anywhere? 

stop searching and subscribe now! 

annual subscription rates (12 issues): 

U.S. Subscriptions - sent third class - $32 
U.S./Canada/Mexico - sent First Class - $45 
U.S./Canada/Mexico First Class PLUS library disk - $100 

All other Foreign Subscriptions - $75 

All other Foreign PLUS library disk - $140 



■ Use the form on the 
rigtit to order or renew 
your subscription. 

■ You may upgrade 
your current subscription 
to a magazine + disk 
combination by sending 
$5.50 ($6.50 foreign) per 
remaining issue. 

■ Check your mailing 
label to see if you 
need to renew your 
subscription. 

■ If you're moving, let 
us know at least 30 days 
In advance. 

Issues missed due to 
non-reciept of Ctiange of 
Address may be acquired 
at the regular bacK issue 
rates. Remember, the Post 
Office does not forward 
third class mall unless 
requested. 
COIUIPUTIST is not 
responsible for replacing 
issues lost while forwarding 
order is in effect. 



Yes, 1 want to subscribe to COMPUTIST. 
Enclosed arc funds for an annual (12 Issue) subscription. 

I am DA new Subscriber 

D Renewing my current subscription 

D Changing my address (please include latest label) 

D U.S. - $32 

D U.S./Canada/Mexico First Class - $45 

□ U.S./Canada/Mexico First Class plus Library Disk - $100 



n All other Foreign - $75 

n All other Foreign plus Library Disk 

Name 



$140 



. ID#. 



Address 
City _ 



State 



Zip 



Country 



Phone 



Exp._ 



Signature 



CP45 



U.S. Funds drawn on U.S. bank. Please allow 4 to 8 weeks for subscription to commence. 

Send orders to: COMPUTIST PO Box 110846-T Tacgma, WA 98411 

(206) 474-5750 



Is it time to renew? Are you moving soon? 

Take time now to save time later! 



40 ^ P®' disk? 

I And that INCtUDES the Tyvek sleeve, too? 







DS/DD 

5 V4 " 
for use 
with: 

Apple 

Cojoimodore 

Atari 

Epson 

TRS'SO 


50 

disks 
for only 

$20 





Sold only in 
sets of 50. 

100% 
guaranteed. 

reinforced 
hubs. 

' Tyvek 
sleeves & 
Write-protect 
tabs included. 




Come 
And Get It!! 



$17,95 



The Book of Softkeys 
Volume III 

Featured in The Book of Softkeys Volume in are: 

Alisr Addition • Aiier Mjrcfiies ' Alligator Mix • Computer Preparation SAT 

• Cut Arid Paste » Demolition Division • DLM (Oevelopement Learning 
Materials) software ■ EA (Electronic Arts) software • Einstein Compiler 
version 5,3 • Escape From Rungisiar • Financial Coohbooh • Flip Oul < 
Hi-Res Computer Goif II • Knoware • Laf Pak ■ Last Gladiator • Learning 
Willi Leeper » Lion's Sliare • IVIaster Type vl .7 • MatheMagic • Minus 
Mission • Millionaire • MjsIc Construction Set ■ One On One • PFS software 

• PS (Penguin) Software ' The Quest • Rocl<v's Boots • Sabotage • 
Seadragon • Sensible Speller IV • Snooper Troops II • SoftPorn Adventure 

• Stickybear series • Suicide • TellStar • Tic Tac Show • Time is Money 

• Transylvania ■ Type Attack • Ultima III EKodus * Zoom Graphics • 
Breaking Locksmitli 5.0 Fast Copy • Csaver • The Core Disk Searcher » 
Modified ROMs • Tfie Armonitor 



We've been working fiard to connpll© 

The Book of Softkeys 
Volume in. 

HURRY! 
Order yours now! 



Please send copies ol Ttie Bool; o( Softkeys - Volume 

ll[. Enclosed is 517.95 plus $2 (55 Foreign) for shipping and 
handling per book. Washington state residants add 7,8% sales 
tax. Send check/money order to: 

SoftKey Publishing 

PO Box 110846-T 

Tacoma, WA 98411 



Name 

Address 

City 

Cogntfy 



_tDff_ 



Statg 



Zip 



Phone 



.Exp_ 



Signature 



US funds drawn on LIS bank 



.45 
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This ntottSh \ covt-t; 



''ii'(iii((:i i>j f^f^yp!' 



AtJdress atl adveiltging inquiries to COMPUTlSt^ AdverfiEriny 

Department PO Sox 1t08l6. Tacoma, WA 58411. Mali 
manuscripts or requesis for Wrlter^s Guides [O GOMrUTlST. PO 
Box n[ju4e-K. Tacoma, WAsSin 

UnsoUfiiteri maniiscnpts are assumed ici ne sttfimtited tor 
publication 3X our siandard. rales of payment, SoltKey publishing 
purchases all and ej<clusive righis. For more informalion on 
submitling manuscripts, consull our wrrter'sguids. 

Enlire contents copyrignt 130& by SoWey Pubhsnma. AH 
nghls reserved. Copying dgne for oliiei than personal or int&rnal 
lefeiencH [wiliioul axpiesswiillen permission frum Ifie pubtshufj 
IE1 proliibiind 

The ediiorJiiii start aesuni^s no Ifabiiiiy or nj&porisibiiity Tur the 
products advurlised in the rnagasinc. Any opimona cxprcsL^ed 
by ihe authors are not neceasariiy those oi COMPuTtST 
maga^tne or SoriKsy Publishing. 

COMPUTIST wiJJ mp^aty-t lost issues iof 5rt days fdllowJnG tn& 
puhlif^aHon dats Wa c^jnnoi be hetd rp-^iponsieie for mail lo^ 
beyond 6(3 days 

A^pJc ustiaJly rfllnrg to an Apptn |[ computBr Br>d Js e tradiemprk 
ol Appl? Compyters. irnc 

SUBSCRIPT] 01^ £: RalQ= ^for i:* isauPK) US £3?. US Inl 
Class. Caneda S Mexico $45, Forelcin $75, Direct Enquiries to: 
COMPUTIST. Subscriptfon Department, PQ Box 11034^1, 

OOMESTig DEALER RATES; CaH l£Ui5> 'HA-tfTliO for more 

intormatlon. 

Change 01 Address- Pii=i3se allow ^ weeks for ctian^e tit 

address to take eflect On postal (orm 35/6 supply your r>ew 

^ddr^^ 3nd your most recent ^drO'SS labaJ, Issues rrtrssed due 

no t^on-receipl ul change of addmse mUf be auoutred ^i 1he 

regular bank ii^sue rQlo. 



/B Mouse Caic 

by Ridu.iRl Glas^nw 

W Sands of Egypt 

by Sieve Ellis 

?7 Number Farm 

by Scott McCamltexx 

/^ Agent U.S.A. 

by Bill JiiitiixOn 

SO Wavy Navy 

by Rich Elarip 

23 Kindercomp 

24^ Flight Simulator Update 

by Erie Snnsii'tHe 

/O Write Protecting the Microsoft RAM Card 

This article sliows yoii how to turn a mild mannered RAM card into a itsefu I cracking tool. 
by Philip G<mz 

t2 Keys to Success on the Franklin Ace 

With a new PROM, your Franklin Ace 100 keyboard bMomes liilly enhanced. 
by Kevin D. Miller 

t4 Modified F8 ROMs On the Apple /// 

Yes. even Apple /// Uijers eun Reset into die monitur. Thut is. nfler ihey lullow die prueedure 

outlined in this article, by Eru: Desiuiirii'rs 

// An Owner's Review of The Copy Master II 

A look at the new cracking card from Applied Technology Laboratorie.';. by Andrew Suariz 

depafiiinEMbi: 

4 Input 

^ Bugs „ _, „ 

7 Readers' Sottkey § Copy Excliange 

25 Tile Product Monitor 




Please address letters to: 

COMPUTIST 

Editorial Department 

PO Box 110846-K 

Tacoma, WA 98411 



Include your name, address and 
phone number. 

Correspondence appearing in the 
INPUT section may be edited for 
clarity and space requirements. In 
addition, because of the great 
number of letters that we receive and 
the small size of our staff, a response 
to each letter is not guaranteed. 

Our technical staff Is available for 
phone calls between 1:30 pm and 
4:30 pm (PST) on Tuesdays and 
Thursdays only. 

Opinions expressed are not 
necessarily those of COMPUTIST or 
SoftKey Publishing. 



Pandora's Box Update 

f-lrsl of all. I wish to thank >oii for a super 
magazine. I also would like to thank all those 
persons wtio lei us share iheii kiiowiecige hy 
sending in their sotrkcys and giving u,s hinls un 
how to deprotect or copy progmnis oiirsclvei;. 

How did we ever do without it? 1 remember 
all too well, like tliat time back in 1983. 1 had 
bought my hrand new Apple ]1 Plus only a few 
weeks before unU was trying to initialize a data 
disk with my Apple Writer 11 program iind 
promptly initialized the masterdisk. Then after 
waiting for more than 6 weeks for a 
replaeement. (Apple was moving from 
Sunnyvale to Cupertino) 1 had to go and piek 
it up at the local customs office, where the 
officer tried hard to charge me duty on tlie value 
of [he program which Apple very generously 
sent me without charging a penny. Well, I did 
not have to pay duty, after some arguing and 
pointing out that 1 already payed duty and sales 
ttix ete. on (he original program. 

1 had learned my le.^son. "'Wriie-proteetthe 
master and always make a backup of every 
program you get AND only use the backup." 

t have received all the hack i.ssues. Softkey 
books volume 1 and U, and disks that t ordered. 
Thank you for looking after me .so promptly . 



Here is an update on deprotecting Pandora's 
Box to a COPYA copy, 

Pandora's Box 

Datamosi, Inc. 
974S CozytTofl Ave.. 

Climumnh, CA 915! I 

RcqtiircmeiitK: 

COl'YA 

Blank disk 

Sector editor 

Original Pandora's Box 

After reading Clay Harrell'a dcprotcetion of 
Pandora's Box (COMPUTIST No. 6. page S) 
I knevi' thai my version was different, the 
Vl'OC and catalog is not on tr.w.k Si I and my 
ver.sion also did a nibble count while booting up. 

A fie I several tries to make a backup with my 
nibble copiers without success I decided to try 
to deprotect this game. 

Alter some snooping around with my Copy 
][ Plus (v5.5) sector editor, in the patched DOS 
3.3 mode. I wa.s able to find a VTOC and 
catalog on track S.i . The only file in the catalog 

was named and the VTOC looked all 

messed up. On track SW, sector S3. 1 found that 
DOS was told to lotik lor a DF in the epilogue 
and the rest of DOS looked almost normal. 

Su my ne-Xt step was to make a COPYA copy 
and use my trusty Copy jj Plu.s sector editor 
to change some of those JMP's (one at a time). 
Get into the monitor and do some snooping 
around ill memory White in the monitor, 1 
found some of the tricks they used trying to stop 
us from deprotecting the game, such as loading 
the addres,ses of last BLOAD length, last 
BLOAD start and catalog track number with 
die value FF. On the disk it showed up like thist 

LDA ff5FF 
STA SAA60 
STA SAA61 
STA SAA72 
STA «A73 
STA IAC01 

Also after reeon nee ting DOS the program 
would fill the screen with @"s and would hang 
up, the only way out was to power down. 

After several tries, 1 got the game to load 
until just past the nibble count and it jumped 
into the monitor v.'ith the final address $2.35, 
I scanned the disk for a JMP or J3R to an 
address before S23S. I was lucky, on my first 
try I found a AC M 02 on track Sll. sector $D. 
I ehaneed this lo an EA EA EA, and it worked. 



Ill a Nutshell 

1) RUN COPYA 

2) When COPY A asks for the slot, stop the 
program and type the following: 



70 
CALI--151 

B942;t8 

3DflG 

RUN 

S) Follow^ the prompts to make a copy. 

4) After the di,e;k is copied, use a sector editor 
to make the following changes on your copy. 



ACK 


SECTOR 


BYTE 


FROM 


TO 


% 


3 


42 


38 


18 





3 


91 


DF 


DE 


22 


D 


IS 


4C 


EA 


22 


D 


19 


30 


EA 


2Z 


D 


AA 


02 


EA 



Don't fotget to write the sectors hack after 
changing them! 

Leo anil Eric Van Der Loo 
Ontario. Canada 



Airheart's Ancient Protection 



For I hose of you who have noi noticed, the 
hottest new game out for the Apple i.s Airhcart, 
by Broderbund software. The game features 
superb doubie-hi res graphics and great 
animation. The folks at Brodcrbund, however. 
are following a growing trend to ressurect 
ancient copy proteciion.s, Upon inspection of 
my Airheait disk, I discovered thai the 
protection greatly resembled the one on 
Choplifter, anotlier game by Broderbund. Here 
is a simple way to obtain a working backup w ith 
Copy If Plu.s: Copy tracks 0-22 with manual 
bit copy. Ne:Kt, copy the disk again over what 
you just copied using the Choplifter parameter. 
Good Luckl Also, tf anyone knows how to 
copy 'deprotect EDD IV. please write me a 
letter telling me how, 

Erie Redlinger 

Reeds Bridge Kd. 

Conway, MA 01341 
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Various Notes 



When is COMPUTIST going to go Lu a 
weekly or even bi-monthly format? I just can't 
stand waiting a wtioli; nKnith Tor new 
infotimiticin. Actually, 1 am writing to share a 
little inlormation! 

In COMPUflST No. 39. the soflkey for 
Cross Country Race worked fine. For those of 
you who have Countdown to Shtitdown, Also 
by Activision, try this; 

TRACK SECTOR BVTES TO 

A DB-FF EA's 

.0- 6 00-iA EA's 

e B IB A9 

0' B IC FF 

[n COMPUTIST No. 33. the softkey for 
Hardball failed on my copy, The aiiihor pointed 
out some funny baiiness going on at B260, so 

I tiled EA EA EA starting with that byte. Bring 
on the hot dogs and beer!!! 

The Skyfox update was no help, but Copy 

II Plus V 5.5 Auto-Copy will render a fully 
worktng copy complete with Space Invaders and 
full Mockingboard sound! 

Going back to COMPU liST No. 32, my 
version uf Cubit starts at 4063 and the number 
of men is at 4^14, 

Regarding the reeent letters on the piracy 
controversy. I wonder who the real pirates arc. 
1 fmd it a little; upsetting when a program I paid 
$25 lor two nionths ago is now selling tor a 
mere $10, I also wonder why an identical 
program for another computer alwayis sells for 
less. I don't know about anyone else, but I 
would certainly own more original software if 
the pnces were a little more realistic. Yon"d 
think that one Ferrari per executive would be 
enough!!! 

In closing, I would like, as Jim Hart did. to 
correspond with others of like interest, we 
already read the same great magazine. 

M. Ferreira 

5380 Marigold Lane 

..,.'. Santa Rosa. CA 95401 



Turbocharged Logo 

Your magaz-ine provides a real service to 
those of us trying to get the best value from our 
machines. 'Your .sofikey for Terrapin Logo 
v2.O0 in COMPUTIST No. .35 turns a 

laboratory' curiosity into a usable, and useful. 



programming language. However, it can be 
made even better by the addition of a "speed 
DOS" without any "judicious surgery to the 
SDOS nie". Here is my experieuee with fast 
DOS: 

Time to booi up from a "BRUN SDOS" cotntiand 



DOS 3.3 

DOS 3.3 + Speedloao 

Dav I DOS 
DiversiOOS 
ProntoOOS ' 



43 set;onds 

35 seconds H"?? 
35 seconds 
Doesn't load 
9.3 secoftds 



DaviDOS only took 35 seconds, but it 
crashes when trying to do a CATALOG (or 

anything else for that matter). 

So. to turboeharge Terrapin Logo, simply 
boot it up under ProntoDOS. or initialize a 
broken-oul disk wUh ProntoDOS. The big 
puzzle is why DOS 3.3 plus Speedload had no 
apparent effect. 

Kevin W. Clark 
Beavcrton, OR 



TASC Comment 



] am writing in response to a letter you 
published in the Input section of COMPUTIST 
No. 31 called 'A difficult TASC." 

I can well understand why Microsoft would 
be reluetant to give oui source code for TASC. 
According to my sources, TASC was (.iriginally 
written in Applesoft BASIC and then used on 
itself! 'I'he only program that would have an 
assembly sovirce code listing is the library 
module called RUNTIME. I ask you- would 
you want your basic source code to such a 
powerful program floating around in public 
liands']' It would be nice for some of u.s, tt) be 
sure, bui you know that somebody out there 
would try to modify it a little hit and then sell 
It as their own. I know that I. as an author and 
avid COMPUTIST reader, would not want my 
source code to a program [jubiished for public 
use and, lets face it. plagiarism. I fully 
sumpathize with Mr. Brand's problem - T have 
had ihe problem a few times myself, but under 
the circumstances I can also sec tliat Microsofts 
stand on the matter is correct. Besi of luck on 
crcatmg an UNTASC program. The person 
who successftiUy does .so will make his fortune. 

Mike Crane 
Prnvo, UT 



Super Boulder Dash 

While reading my latest isue of 
COMPUTIST. I noticed Super Boulder Dash 
listed on your "Most Wanted List". I have 
found that Super Roulder Dash can be easily 
de protected using Randy Abd's Boulder Dasfi 
I and 11 softkey in COMPUTIST No. 38. I'm 
sure your readers would appreciate it if you 
would clarify this error. 

Jcrrell Watts 
Odessa, TX 



Flight Simulator Troubles 

First of all. I hope you can answer my letter 
or at least give this to Eric Sunshine, author of 
the Flight Simulator Soft key (A2-FS2), because 
1 have a doubt in the deprotection of A2 FS2. 
I have the A2-FS2 versions 1 .05 and 2 .0 and 
1 ean't capture the language card data in both 
versions. Steps I thi"ough 6 work fine, steps 8 
through 16 also work well bul... when I execute 
step 7, command AC AEG ihat stands in code 
like this; 

ACAEtie 92 ID JSR $iD92 

That is ihc code for BOOT2 step 5. I find that 
the code between S1D37 through $IE00 are 
empty, resulting that this instruction among 
others in the et)de of the main part of boot at 
1;A7E0-SB2DF can't execute via JSR to $1092 
because diis JSR doesn't exist only zeroes. 

1 finished the method .step-by-stcp through 
the end bypassing step 7 and all is in place but 
the language card data and 1 don't know hgw 
Lo eapiure it. 

When 1 boot by copy of A2-FS2 it boots okay 
but after loading the title LOADING.... and tty 
to load language card data in tracks 20, 21 . and 
22 Stops without stopping the drive motor and 
hangs up. 

Also, f have found that the soft key for 
Famavision (COMPUTIST No, 30) did not 
work for my version of this program because 
I had different address epilogues. To fix this. 
1 changed Ime 1 13© of ilie controller to: 

1130 DATA 255.255.255,255 

and that's all, the soft key works perfectly. 

Manuel Sanabria Pastrana 
Mexico 

Mr. Pastntna: Eric Suiishim* 's reply tn your 
letter can he f omul on page 28 of this itiagazine. 
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Hacker II, Robotwar, 
Castle Wolfenstein, Silent Service 

In '"HiiL-ker 11", llie proCeclioii is bused on 
a nibble count at track S23. Track S23 is very 
difficult lo copy (drive speed eritica!). Can't 
make a backup 7.'?! Only way to baci< up this 
program was to crack it, (At least for me with 
my poor disk drive) To bypass the nibble count 
check we have to modify file HACKER 11 
HELLO. Make the following Changes to 
HACKER II HELLO: 

BLOAD HACKER [I HELLO 

CALL -151 

6^C9:A9 55 8D 35 64 6» 

.IDftG 

BSAVE HACKER n 

HELLO, A$6«flt(,LSB589 

For those of you who are interested in what's 
goin^ on: 

e3C9- IDA SJ55 LOAD NIBBLE COUNT RESULT 
63CB. STA $6435 PUT IN THE RIGHT LOCATION 
6^CE: RTS AND RETURN 

Let's hope that there are no more nibble 
cuiint checks. 

If you carefully examine the disk you will 
find a text file that has some hints. You tan use 
FIXCAT (from Bag of Tricks) to Ho this. Just 
scan (or the losit files and when you see some 
normal text, recover the file. 

I have seen sottkeys for Robotwar and Castle 
WolCensteiii, but here is some information about 
DOS used on those programs (there are at least 
two different versions of Castle Wolfenstein) 
so this scheme is for the oldest one. 

Both of these are using 1 3 -sector based 
systenit;. To ea,>;ily copy the files to Ift-^ector 
diskettes, wc cun use MulTin with the following 
mortifications: 

BLOAD MUFFIN 
CALL -151 
1AA9: 18 66 2D m 
801G 

After the.se transfers, programs will not work 
as gupcetccl. Wc have to make some changes 
to the DO.S. For Robotwar we must make a 
short patch lu the DOS. Just make your own 
startup program, as follows: 

NEW 

It) POKE 4»288, PEEKd): POKE 

46289, PEEK(2) 

2« PRINT CHK$(4);'RLIN HELLO" 

SAVE HELLO ROBOT WAR 

And use Master Create (or Copy )[ Plus) to 
set this as starmp program. 



This must be done because all the files are 
written as "Applesoft files," But really they 
arc machine language files. If we don't make 
the patch to DOS the program will simply not 
run. Because when you load an Applesoft file 
DOS jumps to Applesoft BASIC that tries to 
make corrections u; the current program. Since 
in this ease the program i.s in machine language 
the BASIC will destroy parts of the machine 
langiiiige prog ram . 

Castle Wolfenstein does not need the 
previous patch. 

The next step is to make the folio winji 
changes lo the programs. Use a sector editor 
(that has search capability) to make some 
"corrections". You shouldn't find these from 
DOS. 



CHANGE 



TO 



COMUflENT 



7E9E 



BD9E 



. , Different temirial 
outoul roaUne 
addresses, 
A9acaDEDB7 A99£aDEDB7 Catalog sector 
begins from 
di f ferert sector 

That should do itl Now you can insert some 
of those fast DOSes on your disk tind enjoy 1 

I'm having a hard time, with my Apple Wiiter 
2.0, Does anyone have any tips? 

Also I noticed a bog in the Silent Service 
softkey; Should byte 9A be A9'.' 

Jussi Eloranta 
Lexington, MA 



The Bard's Attributes 

Joe Montano's, "The Bard's Dressing 
Room". COMPUTIST No, 36, asked for an 
explanation of how the allribules are stored in 
bytes $lfi-S13 of the character's recortl. Here 
is how it is done. 

Let's assume your super lieio character has 
the following attributes. St = 8, Iq = 14, Dx 
= 15. Cn =9, and Lk = i.3. (some super 
hero). You use your favorite sector editor and 
find in bytes Jl0-$13 the following values. S43, 
S8F, $4B, and $4E, At first this all looks very 
confusing, but soon it will all make sense. The 
method used is siiiiilar to the packed variable 
stoiagc of Pascal. 

First lets break the hex byt^s into their bit 
components. 

J4 3 58 F S4 B S4 E 

0100 3011 1000 nil 0100 1011 0100 1110 



Now realising llie apparent maximum 
attribute value is IH, or 00(11 0010. we see only 
five bits are needed and the leftmost three bits 
will never be used. For everj' two bytes, sixteen 
bits, we can store three five hit attributes and 
have one bit left over. Inspecting several 
characters quickly showed wiiich bit was not 
being used. Distributing the above bits into 
groups of five and including a skip bit in the 
appropriate place, wc get the following 
seqtience. 

St Iq Dx Cn Lk V. 

01000 81110 01111 01001 01101 01119 
8 14 15 9 13 14 

I do not know what the last attribute is. I 
know it is not a checksum and it may not be 
even used in the game. Now if you want all your 
super hero's attributes to be IK's. or 10Wl0"s, 
here's how to go about it. 

The following bit pattern is needed for all 
18's 

10010 10010 10010 10010 10010 10010 
Combine these into four bytes, 

1001 0100 1001 0010 1001 0100 1001 0010 
59 4 19 2 19 4 S9 2 

l,Isii)g your favorite ^^ector editor, ctiange 
bytes $ !(fl-S 1 3 to the hex values 94, 92. 94. and 
92, Boot up Bards Tale, add your character 
with his usual team and rcsave to disk. That's 
all there is to it. By the way, if your style is 
a really lopsided game, you can make your 
super hero's attributes all 3rs, or II Ill's, 
Eighteen is not the maximum value an attribute 
can have. 

Thomas Kazmierczak 
Clilion. NJ 




COMPUTIST No. 37: 

DOS Allerer: 
Lmc 1850 of the program should read: 

1850 HTAB 6 ; VTAB 7 ; PRINT "FILENAME* =>' 

;N$ 

Book or Soflkeys I: 

Bug or Tricks: 

The BLOAD in line 210 of the Hello 
Program should be a BRUM, 



« 
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Winston Ou's softkey for. 



Raid over Moscow 



Atcess Software, Inc. 

Ru(j u ircments: 

Any simple copy program 
A sector eUilur 

Raid Over Moscow is a typjca] ai it! -Soviet 
arcade game based on this scenario: ihree years 
after the signing of liie SALT IV treaty which 
provided for total disarmament of nuclear 
weupuns. ii Persian gulf incident causes the 
Russians to launch a nuclear strike. Yes, the 
evil Russians have secretly kept a cache of 
nuclear missiles. Tsk, tsk tsk. h is up to you, 
commander of a space station of Sreahh 
Bombers, to raid the major Soviet cities and 
destroy the missile control systems, thus 
preventing the missiles from exploding (huh? 
Well, that's how the story goes). After that, go 
destroy the Soviet defense center in Moscow 
as a little slap on the wrist for the evil creatures. 

The first time 1 tried to back up this program 
I tised Disk Muncher 1.0, which seemed to 
work tine and dandy until, a few seconds after 
booting up. 1 heard an awful swishing noi,';e 
with a "click" on the end of it repeated quite 
a few times. This was the tragic sound of a di.^k 
drive hopelessly searching for something on 
track ft. In any case, none of the bit copiers ! 
tried worked, so I decided to be intelligent and 
iinprotect it. 

The entire disk was written with something 
very similar to DOS 3,3, so it wa.s easy enough 
to examine track 0. sector 0, which eventually 
jumped to :?BD3E, which jumped to SBBflt), 
where the fun began. Here's the code: 



BB03- 


A9 00 


LDA fiS00 


BB02- 


SD 7B 04 


STA S0478 


BB05- 


A6 ZB 


LDX $2B 


BH07- 


A9 m 


LDA ffJ00 


BS09- 


20 A9 B9 


JSR 5B9A0 


BB0C- 


20 44 B9 


JSR $B944 


BB0F- 


A5 2D 


LDA S2D 


SBll- 


C9 00 


CMP nm 


6B13- 


00 F7 


m JBB0C 


BB15- 


A9 01 


LDA mi 


8B17- 


80 FF B7 


STA $87FF 


BBIA- 


AD FF B7 


LDA J87FF 


BBID- 


0A 


ASL 


BBIE- 


20 AS B9 


JSR $B9A0 


BB21- 


20 44 B9 


JSR SB944 


B824- 


A5 2D 


LDA S2D 


B626- 


AC FF B7 


LDY SB7FF 


8B29- 


D9 30 BC 


CMP SBC30 


BB2C- 


D0 D7 


6NE SBB05 



BB2t- 


C8 




INV 


BB2F- 


98 




TYA 


BB3e- 


C9 23 




CMP #123 


BB32- 


90 E3 




BCC f.flB17 


BB34- 


m m 




LDA mm 


BB35- 


20 A0 69 


JSR JB9A0 


BB39- 


4C B3 


08 


J MP 508B3 



As 1 can now see, most of thi.s code is 
innocent enough: the JSKs lo $B9A0 and $B944 
are the move disk arm and read address field 
routines, respectively. However, when 1 placed 
a WC 59 FF (J MP into monitor) instruction at 
$BB3y on my work copy, nothing happened, 
so I assumed (hat the program never reached 
that point and that the cheek had to be 
somewhere before there. Then f noticed that at 
SBB2C it had a branch that went all the way 
back to the beginning of the routine if two 
addresses didn't match up. So, 1 changed the 
second part of the DNE fbranch if not equal) 
instruction to $00, causing the program to 
continue even if the addresse,'; were unequal. 

And that was itl One iousy tittle byie... 
anyway, 1 played the game through once and 
watched the three Ime message of approval ai 
the grand finale; it worked fme. 

Now that I've bored you all to death, here 
are the steps: 

1) Copy the disk with your simple copy 
program. 

2) Get out your sector editor, and edit Track 
SB. Sector $5. byte S2D. Change it from $D7 

to %m. „ 

s 



Marc MorriKette'x softkey for. 



Crime Stopper 



Haydtfti Software 

Requirement!;: 

Super lOB 1,5 
A blank disk 
Crime Stopper disk 

Crime Stopper is an old text adventure game 
by llayden. utifortuiiately eopy-protcctcd. 
However, the protection is quite minimal .^nd 
easy to crack. 

Whenever I buy a new program, I first boot 
it up and play it and then attempt to do my 
routine backup. The disk, when booted, 
displays an Applesoft prompt (]) on the screen, 
so il would seem that the disk uses a modified 
version of DOS. After trying my luck with 
Copy II Plus 5.0, 1 booted up the bftekup. No 
luck. The disk would hoot mo,^i of DOS. but 



just before displaying the Apiplesoft prompt, die 
computer would display a character on the 
lower right corner of the screen and return me 
to BASIC. 

[f I booted my original disk, and after booting 
completed, inserted my backup, the program 
portions would load pr^)jjerly. 1 decided lliat diis 
was not good enough, since I wanted a copy 
that would boot, I then tried using COPYA. 
after turning off DOS's error checking routine 
(B942; 18 in the monitor). COPYA kept giving 
me the ''UNABLE TO READ" me.s.safie. I was 
overjoyed when I saw liie soft key foi' Crystal 
Caverns in COMPIJTIST No. 31. (I also own 
Crystal Cavems and Micro Addition, both with 
the same protection scheme as Crime Stopper.) 
I tried the softkey on all three <)f these. 

No luck! I had another version of MUFFIN, 
and the protection on my Crystal Caverns was 
different! I decided to snoop a little fiirther. 
After using the Nibbler (from COMPUTIST 
No, 19) to view the raw track nibbles from the 
disk, I was able to confirm the following. 
Tracks $0 tiirough S2 (the DOS tracks) have 
the address and data epilogues changed from 
the normal DE A A to ED AA, Tracks $3 
through S4 and S6 through !ti22 (the tracks 
which contain the program files) have changed: 
the address prologue from the normal D5 AA 
96 to BB AA 96. Track S5 is blank (full of 
SFFs). 

I then wrote up a eoniroller for Super lOB 
1 ,5 to read tracks S3 through %4 and $6 through 
S22 u.sing an address prologue of BB A A 96 
and write using the normal D5 A A 96. I 
INlTialized a blank disk using ""HELLO" as 
the greeting program name. Next, 1 installed 
the controller (printed at the end of this article) 
into Super lOB 15 and ran it. Amazingly, it 
workedl Fortunately, the program does no 
check for the original disk anywhere in it. Now, 
Crime Stopper is open to the rapidly growing 
hobby of APT. 



Step by Step 

1) LNITialize a blank (or unwanted) disk usiisg 
"HELLO" as the greeting program name. 

IMT IIKLLQ 



2) Install the controller printed at the end of this 
article into Super lOB 1 .5 and run it. Answer 
"NO" to the formal option. 

3) Copy the original Crime Stopper disk to the 
INlTiaiized disk. 
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4) Enjoy the licproteL-letl Crime Stopper! 

This softkey will work on any Hayden 
program in which the Tollowing is True: Iracks 
$0 through $2 have the address and data 
epilogues changed from DE AA to tD AA. 
Tracks $3 tJirough S4 and $6 through $22 have 
the address prologues changed from D5 AA 96 
to BB AA 96, Track $5 is blaTik (rull of $FF.s). 
I have tested this softkey (successfully) on the 
following Hayden programs: Crystal Caverns, 
Crime Stopper, and Micro Addition. I Itnow 
there are others that it will work on. 

controller 

1000 REM CRIME STOPPER CONIROLLER 

iei0ST = 15 :LS= 15 XO = m :FAST = 1 

1020 TK = 3 :LT=5 : GOSUB 1050 

1030 TK = 6 :LT = 35 : GOSUB 1050 

1040 HOME . PRINT "COPVOTE" .END 

1050 RESTORE : GOSUB 190 : GOSUB 490 : GOSUB 

510 
1060 GOSUB 230 : GOSUB 490 ; GOSUB 610 : IF 

PEEK (TRK ) = LT THEN RETURN 
1070 TK = PEEK (TRK ) :ST = PEEK (SCT ) : GOTO 

1050 
5000 DATA 187 ,170 ,150 

controller checksums 



1950 - M7D7 

1050 - $F197 

1070 - i3F2F 

5000 - $7432 



- $356B 
1010 - $88AA 
1020 - J9392 
1030 tFB0I 
1040 - J25F8 



Jim S. Hart'!: softkey for.. 



i 



Key Perfect 5. 



MicroSparc. Inc. 

45 Winthrup Si. 

Concord. MA &1742 

$29.95 

Reqtiiretiients: 

Original Key Perfect 5.0 disk 

One blank di.<;k 

A copy program tiiat ignores tinrcadable sectors 

(Locksmith Fast Copy, etc.) 

ProDOS User's Disk or equivaient 

A good sense of htimor 

Key Perfect 5,0 is a program designed to go 
through your Applesoft or machine language 
programs and generate a checksum table (sonnd 
familiar?). This may be used to check against 
wlial you have typed in from N'lbhk' magazine 
to see if there are any typos. My two gripes 



against the program: { 1) it is protected, and (2) 
a program .such as this should be provided free 
of charge, or for a nominal fee ($10 or so). 
Nibble has quit printing checksum tables with 
their older program, Apple Checker 3.0. so this 
FORCE.S user."; to buy the Key Perfect program 
to guard against typos. I'm glad COMPUTIST 
hasn't taken this policy. 3 always have several 
'bugs' in the programs 1 type tn so a checksum 
program is an essential. 

The Key Perfect disk itself is ProDOS based 
5o the protection usually isn't that hard to figure 
out (Spell works and Word Juggicr were 
exceptions) , The i-eason you need a good sense 
of humor is that the protection scheme in Key 
Perfect is so simple it's funny] There is no direct 
access code on the disk that looks for anything 
other than normal 16 sector address marks .so 
I decided to take a look at the main system File 
KEYPERF.SYSTRM. Here is the code at the 
start of this file: 



2000- LDA $GF30 

2303- STA $2021 

2006- JSR IBF00 

2009- $80 

$20,20 

200C- BNt $2013 

200E- RTS 



;GeT slot no. 

jStore It In parm I ist 

:Call MLI 

iReatl block 

,adtjf of MLI pa™ i Ist 

;Was block readable? 

; Ves. bomb into monitor 



2013- JMP $6500 ;Else start program 

2020- $03,60,00. .MLI parm list 
$30,17,01 

For a complete explanation of what all of this 
does I suggest that you read Worth and 
Lechncr's Beimilh Apple ProDOS (cliapter 6). 
In a capsule, block SI 17 is read, and if an error 
occured (like an I/O error, perhaps?) execution 
is transferred to the main code and all is well. 
It so happens thai block $1 17 is the last block 
on the disk, which means it resides on track 
$22. When you copy tlie disk with Locksmith 
Fast Copy, notice that track S22 produces a 
column of inverse "A's", in this case meaning 
that the track is unformatted. Therefore, if the 
read is successful then the dhk is a copy and 
the code will go no further. This is easy to fix. 
Ju.st replace the three bytes at $2{WI from $AD 
30 BF to S4C 13 2W (JMP 1:2013) and the check 
is jumped over! 



Step by Step 

1) Initialize a blank disk, 

2) Copy the oiiginal onto the blank disk, 
ignoring the error.s on track S22. 

,1) When the copying is done, take both disk.!; 
out and put away your uriginiU. 

4) Boot up ProDOS and get itilo BASIC. 



5) Insert the copy disk and set the prefix to that 
of the copy. 

PREFIX/KEYPERFECT 

6) BLOAD the offending file, jump over the 
disk check, and BSAVE the file back to the 
disk. 

BLOAn KEVPERF.SYSTEM. ASlflflf), TSY.S 

CALL -151 

2»Be;4C 13 2» 

BSAVE KEYPERF.SVSTE.M. MlUm, TSYS 

8) You now posess an unprotected copy of Key 
Perfect to do your checksumming with. 
Wouldn't it be nice if all protections were this 
simple? 

S 

Jim S. Hart 's softkey for. . . 



The Final Conflict 



Hayden Software 

tm Suffolk St. 

lawdl, MA 01854 

Requirements: 

The Final Conflici original disk 

Demuffin Plus 

A blank initialized disk 

64K Apple U Plus or a way into the monitor 

The Final Conflict is a wargame style 
program with the object being to (naturally) 
defeat either the computer or a human 
opponent. It is a relatively old game and as such 
I picked it up at a boofc.store for fli9-9.i. Using 
Locksmith 6,0's quickscan function along wilh 
the nibble editor revealed that the disk was DOS 
}.2 formatted wilh an altered address prolog. 
Deciding to try a different approach than usual 
(i.e. Super lOB) ! came up with the method 
below. Follow it to obtain a deprotected Final 
Conflict disk. 

1) If you have a way to get into the monitor 
(Integer card. NMI card, etc.) go to step 5. 

2) Boat a nomnal DOS 3.,1 disk and get into the 
monitor; 

CALL -151 

3) Write enable the language card, copy the 
motherboard ROMs onto it. change the Reset 
entry point, and then write- protect the card: 

Cfl8l N CflSl 

i>eea<De(w.FFFF!vi 

FFFC:59 FF 
CeS3 N C»83 



8 
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4) Get back inio BASIC. 
Em6G 

5) Brtoi up the Final Conflict disk: 

6) When you see the Applesoft prompt, open 
the disk drive's door and go into [he munilur 
by pressing Reset. 

7) Move The Final Conflict*s RWTS to a safe 
place: 

68fl«<BSfl«.DFFFM 

8) tnscrt the blank iaitializai disk and boot il up: 

C6»()G 

9) Go into the monitor once again and BLOAD 
DemulTin Plus into place: 

CALL -151 

BLOAD DEMUFFIN PLUS, A$8»3 

10) Disconnect DOS, move the Final Conllicl 
RWTS back, and then reconnect the hybrid 
DOS: 

FFSyG 

B8e»<68ee.6FFFM 

A851G 

11) Start up Demuffin Plus: 
8»3G 

12) Copy all of the files from the Final Conflict 
disk to the hiank initialized disk. 

13) At this point, you have a deprotected disk. 
To speed things up you may want to add a fast 
DOS such as Diversi-DOS or Pronto-DOS, 
Enjoy your backup! _^ 

A 

Richard Glasgow's softkey for. . . 



2) Use \hz sector editor to change track SI2, 
sector $0C. byte $lb from a $38 to a $60, 



Miss Mouse 



Retinirements: 

Copy II Plus 6.5 

Miss Mouse is a nice pre-school education 
program. The protection is more at the high 
school level. The program runs die llle MINDl 
which checks track three and if the correct 
information is found, the boot continues. 
Otherwise, a message stating thai the disk is 
defective is displayed. 

Step by Step 

1) Use the sector copy of Copy )[ Plus and copv 
tracks ^mmi and $(M-S22. 



Peier Chan Shun Kit's softkey for. 
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Broderbtmd Sofiware 

Requiremenfs: 

48K Apple 11 

DOS 3.3 (or a fast DOS) 

A blank disk 

Snoggle diskette 

Snoggle is a Pac-Mun like game published 
by BnxJerbund Software in 1 982. Since Snoggle 
is not a very good game and using a whole side 
of a disk to back it up is a wasteness. I decided 
to break it into a single file. Moreover, the 
protection scheme only relies on DOS 3.2 with 
altered DOS marks. 

Now it is time lo start boot code tracing the 
game. 

1) Initialize a blank disk witii no HELLO 
prog ram - 

INIT HELLO 
DELETE HELLO 

2) Enter the monitor by typing 
CALL-ISl 

3) Next, we want to move the DLsk Controller 
ROM boot program to S9M0. 

!)60e<C6O9,CFFFM 

4) Change the boot ROM to stop after loading 
the first sector and then mn it. 

%KA:98 

9891 :4C 59 FF 

96«»G 

C»E8 

5) The next stage jumps to S301. We wdl 
change the jump to $9301 and stop it there. 

98fl»<8«8.8FrM 

9»05:9R 

9843:93 

9391 :4C 59 FF 

96e»G 

CflF,8 

6) Now wc move the next step up to S93(M and 
modify- it to jump to a small routine at .?9Wfl, 
The routine checks the progress of Bootti and 
enters the monitor when the RWTS has been 
read tn. 



93»B<3B0.3FFM 

9343:4C m 98 

9()»B:A5 3E C9 5D W0 »3 4C 5D 

9eea:e2 as 3E sd fe m A5 .if 

9eie:8D FF 9« 40 59 FF 

()60HG 

C»E8 

7) Wtien we Iwk at S90FE & $9K1FF. we can 
Und that the next step will jump to $B7M. Here 
wc will modify the program to jump to the 
monitor after ihe game has been read in. not 
$5000 where ihe game starts. 

El 

B75F:4C 59 FF 
B7»eG 

8) Now Snoggte has been completely read in. 
Wc dicn move die code to a .safe place and boot 
the disk with no hello program. 

9»e<:64»e,AAFFM 

(Insert the slave disk) 
CfitWG 

9) Enter the monitor and type in the following 
code. 

CALL-151 

5iefl:2fl 2F FB EE F4 83 A0 47 
5I»8:A2 m BD «fl 09 9D »B 64 
511»:E8 D0 F7 EE BC 51 EE BF 
5118:51 88 DB EC 4C B« 5B 



Clieek your 


typing against the following 


dis-assembly: 




5100- 20 2F FB 


JSR IFB2F 


SIM- EE F4 03 


INC $03F4 


5106- A0 47 


LDY SS47 


5108 ki m 


LDX nm 


510A- BD 00 09 


LDA 50900, X 


5100- 9D 00 64 


STA $6400. X 


5110- E8 


INX 


5111- D0 F7 


BNE $510A 


5U3- EE 0C 51 


INC $510C 


5116- EE 0F 51 


INC $510F 


5119- 88 


DEY 


SUA- 00 EC 


BNE S5108 


511C- 4C 00 50 


JMP S5000 



10) We also have to put a jump to thi.'i routine 
right before the starting address of the program. 

8FD:4C 00 51 

11) Now we can save the file on to the disk, 

BSAVE SNOGGLE,A$8FD,L!f5B(t3 

Now vou have a 93-sector BRUNuble file of 
SNOCGl.E. Have fun ! 



■ i. 
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A Hardmrare modification: 



Write ProiecUng tfte 
Microsoft RAM Card 



by Philip Goetz 



Kequirements: 

Microsoft I6K RAMcard 

Light gauge insulated wire 

Single polc/double tlirow (SPDT) switdi 

Soldering iron 

A'off ; This procedure requires mndijtanirm nf 
your 1 6K R.-iM card, which will void its {tmd 
possibly the compuier 's) waminiy. Neither the 
author or COMPUTIST will be rexpansible for 
any damages incurred ax a result of //j/.f 
procedure. Observe all the usutd I ami some of 
the wtusual) precautions when working with 
elect mm' (Equipment. 

An imponant cracking tool is an old style F8 
ROM which resets mlo the monitor, like those 
in the early Apple tls. They let you stop a 
program at any time, so you can with luck 
BSAVE it. or at least capture its DOS. 

You can copy tlie [tionitor inb a RAMcard 
and change it to reset to the monitor, but most 
well- protected programs erase the RAMcard on 
bootup. Fonimately, a simple mtxlification lets 
you write -protect your RAMcard with the Oip 
of a switch. It requires a small SPDT .switch 
(one which switches a contact in llie middle 
between 2 other contacts) and 3 short pieces of 
wire. When the switch is iii one position, the 
RAMcard will function normally. When it is 
in the other position, it becomes write-protected 
(ROM-like), To use it as a cracking tool, copy 
a ROM which resets into the monitor into it and 
flip the switch. 

Programs which use 64K to run will not iim 
when the card is writc-protcctcd. but you can 
reset to the monitor, Program.s which don't need 
64K may circumvent a write-protccted 
RAMcard by switching tn the ROMls, hut this 
is unusuul. 



This will void your RAMcard 's warranty, 
and possibly your computer's warranty. Neither 
1 nor COMPIJTLST are responsible for damages 
caused to your RAMcard, your computer, 
yourself, or ynur close relatives. This will only 
work on Microsoft or similar cards. 

First fasten the switch to the RAMcard, I 
used plastic ceinent to glue it to the upper rear 
of the component side of the card Position it 
Vis low as possible so the switch can be flipped 
through the slot in b.^ck of the Apple cas(» 
without removing the lid. You may have to file 
the top of the .slot on the lid (for a II + ) to make 
the slot lull enough; on a lie. you may have to 
use an external switch or reinovc the lid to 
switch it. 

Drill a hole or file a depression large enough 
to run 2 wires through at the top of the card 
near the switch. The wires which run from one 
side of the boaid to the other will go through 
here so they won't be squee7.eti against the 
bottom of the lid. Make sure that 2 wires fil 
in it comfortably. 

Locale resistor R3, which is in the center of 
the RAMcard board. On my clone of the board 
it is called RJ. Solder a wire on the back of the 
card to the top of R3. Run it through the hole 
to the front, and solder it to the contact on the 
.switch which will be open when the switch is 
in normal position. 

Find chip U 1 8 (a 74LSa0). It is al the bottom 
neaithe tear of tlie card. Gently remove it using 
a chip-puller or small screwdriver. There will 
be a notch or mark at one end of the chip. The 
pin to the left of the notch is pin 1 . Count two 
down to find pin i. Bend it out perpendicular 
to the other pins so it will not touch the socket 
when reseated. Reseat it in its socket, making 
sure that the notch points the same way a.s the 
notches on all tlie other chips. Solder a wire 
to pin 3, which is sticking out, and solder the 
other end to the contact on your switch which 
will normally be closed. 

Locate chip U16 (the only 74LS175). It is 
two chips above UIK. Solder a wire to the 
contact for pin 13 of chip Ui6 on the back of 
the board. Run it through the hole ai the top 



of the card ajid solder ii to the switch's middle 
contact. Pin 13 is found by counting from pin 
I down to pin 8 on the end of the chip, 
switching sides, and counting back up towards 
the notch to 13. It is the tburth pin down on 
the right side of the notch. The switch should 
now be wired like this: 



fop of resis.tor R3 d— 1 I 

1 Open I 

Pin 13 of U16 (74LS175) o— I I 

I Closed I 

Pin 3 of UlS (74LS00) o— I I 



Now the card will operate normally when the 
line from chip U16 to III 8 is closed, and will 
be write-protected when ihe line from R3 to 
U 16 is closed. The red write-enable LED still 
reflects the card's .status. Setting the .switch to 
write -protect guarantees that the card cannot be 
write enabled, but if the card is write enabled 
when you flip the switch it will remain so until 
you send another command to the RAMcard. 
Thus disable writing with, say, a SCflRf) before 
booting your protected disk. 

The following text file will copy your ROMs 
into the RAMcard and then modify the card to 
reset into the rncmitor. 

CALL 151 
CflSl CflSI 

D«ee<ne0e,FFFFM 

FFFC:5*> FF 

cese 

If you w,int to make any additional changes 
to the mimitor (sec the articles on improving 
the FR ROM in COMPLITIST Nos. 6. 19, and 
29). insen them after FFFC:5y FF. After 
EXF.Cing this file, flip the switch to write- 
protcct and boot your protected disk with a 
PR #6. 
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An Oywnew'% Review of... 



the Copy masteR ii 



by Andrew Swartz 



Applied Techwhgy Laboratories 
J!926 Sama Monica Blvd. 
Los Angeles. CA 90025 

WorLs with Apple ][ Plus and //e. 

About one year ago, 1 haU purchased my 
Copy Master II copy card in hopes of 
deprotecting my 'piotected swftwan;' . The Copy 
Master version I bought allows the user to back 
up all 12 8K single- load software at the push of 
a bunon. This package also included screen- 
dumpiug software to print text and/or graphics 
from protected software. At that time. I paid 
$139.95 for this board. Today, it can be 
purchased through mail-order companies for 
about .$90 to $100 

The Copying Process 

The Copy Master 11 card definitely will copy 
all memory resident DOS 3.3 software without 
any problems e.^Lcep: proprams thai verify the 
presence of (he original disk in Ihe drive. This 
can still be defeated by modifying the verifying 
stibroiitinc through the use of the Step/Trace 
Program supplied with the board (discussed 
later). The Copy Master is, supposed to copy 
CP/M programs also, though 1 have never tried 
this feature. 

For programs that are not entirely memory 
resident, it is possible (but often a pain and ver>'. 
very difficult) to make a copy of a partieular 
program by segmenting it onto two or more 
disks. For example, I managed to make a copy 
of Racterhy copying the first stage of the game 
up to the hi-res title screen with the Copy 
Master and then bit copying the rest of the game 
to another di.sk. .Now when I boot Raetcr and 
get to [he tide page. I flip the di.sk and the game 
proceeds normally. Other limes, disks retrieve 



small pieces of 

information 

constantly and 

are impossible to 

copy with the 

Copy Mastei . I am sure if you are a computer 

wizard, you could manage to link the different 

segmented files created by the copy Master on 

one disk thus .saving disk space. The Copy 

Master manual contains very little information 

on using the board to copy nruitiple access 

software. 

Thi.s copy card also comes with conversion 
software (which ytju select from the copy 
program disk menu) that allows you to make 
copies 'board independent', meaning you won't 
need to have the Copy Master in your Apple 
to run your copies. The Step/Trace progratn 
allows aser."; to debtig and examine a program 
(even a protected one). With a press of the Copy 
Master trigger switch, this program will execiite 
instructions in a program one by one. It will 
display the last four instructions with the values 
of die accumulator, x-register, y-register. status 
register, and stack pointer. 

The File Writer program is used when the 
user want.s to modlly code produced by the copy 
program. He or she is allowed to change code, 
then this program will write the code back to 
the disk. The Pause Program feature is used to 
pause a program. It is really a useless feature 
and should have been replaced by an emer-the- 
m on) tor feature, which the Copy Master [I 
lacks. (After writing Applied Technology Labs 
asking why the ability to enter the monitor wa.^ 
Icfi out of the Copy Master U card, they 
informed me that their new product called the 
Easy Card, which combines the power of the 
Copy Master IT card with a clock/calendar and 
other functions, docs have the ability to enter 
the monitor.) 

The last two programs on the menu. System 
Test and System Conligure, lest your Apple's 
main and au>:iliary memory, the on-board 4K 
RAM in the Copy Master (where the Copy 
program is stored), and allows you to change 




the slot your Copy Master resides in. (The copy 
Master [I bo.ird will fit in any slot except the 
Apple He auxiliary slot.) 

One of the best features of the Copy Master 
Card is the screen-dump software. With 
software text and /or graphics can be sent to a 
variety of printers with a variety of interface 
cards. It works extermcly well even with 
protected software. On dumping graphics or 
graphics with text you can select from 
emphasized printing, hi-res or double hi-res (on 
the He), inverse graphics or text, and double- 
sized graphics. I own an Apple Imagewriter 
with an Apple Super Serial Card, 1 can .i^ay this 
feature works pretty well. Another nice feature 
is the ability to save hi-res or double hi-res 
screens to a disk. 

Closinj; Thoughts 

Overall, the Copy Master 11 is a so-so buy. 
In ray opinion, if you are going to buy a catil 
specifically for copying, look into some other 
copy cards like the Wildcard It which has the 
Bnter-thc-monitor feature. I feci that thai shottld 
be a necessary feature of all NMI copy cards. 
1 don't see how the people at Applied 
Technology Labs could have forgotten this 
important feature. However. 1 must also ,=;ay that 
the ability of the Copy Ma.ster 11 to dump 
giaphjcs and text from protected software 
makes up somewhat for this loss. 

If you are planning to buy a copy card, you 
should keep in mind the difficulty in backing 
up multiple access software with copy cards, 
since they can only retrieve information that's 
already in the computer's memory. This may 
make you want to con.sider buying a decent bit- 
copy program like Copy 11 Plus to use in 
conjunction with a copy card. 

s 
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Sofftlcey for,,. 

Mouse 
CaMc 

by Richard Glasgow 



Requirements: 

COPYA 
Sector Editor 

The first thing I do when 1 buy a new 
program is tr>' to back it up before I try to use 
ii . When I usai COPYA to backup Mouse Calc, 
I would ^et the messugt;: "Reboul Mouse 
Calc. ■ " The next thing 1 did was to watch the 
boot by luking off my drive cover and looking 
at die tracks the program uses. I have the tracks 
marked on the drive as described in the EDO 
m manual. This speeds Lip the process of 
finding the area where the protection is. 

On Mouse Calc. I noticed that the last track 
accessed was track S13. So, 1 got out my trusty 
sector editor and started snooping around this 
track. I started inserting 7.ero bytes in each 
sector (on the copy disk of course), until I 
noticed a change in the hoot. Sure enough, 
when I reached sector $09, I did not get the 
reboot message. Looking further at the code on 
sector $09. I didn'l Tuid much dial made any 
sense. So, I went to sector $08 and there i found 
some code that looked interesting. Upon 
examining and experimenting with this code a 
little, I noticed that if I changed byte $29 from 
a S07 to a $4S, the program would boot just 
fine. 

The code surrounding this byte looked 
something like this: 

A8D1- A9 20 IDA H20 

A8D3- 85 06 STA 506 

A8D5- A2 00 LDX #$00 

A8D7- ES I NX 

A8D8- D0 07 DNE SA8E1 

A8DA-- C6 06 DEC S06 

A3DC- D0 03 BffE SA8E1 

ASDE- 4C 69 A9 JMP IA969 

ABEI- AD 00 03 LDA J0300 

What my modification does is change the 
BNE $A8E1 to a BNE $A922. 

Step by Step 

1) Copy the program using COPYA or any 
other fast sector by sector copier. 

2) Scan the copied disk for die sequence $A2 
00 E8 Dt) (57 C6 06 and when found, change 
the $07 to a $48. 1 found this sequence on track 
SI 3. sector £08. byte $25. 



Keys to success on the... 



Franklin 
Ace 



by Kevin D. Miller 



Requirements: 

Pranklin Ace 100 that does not generate all 
ASCII characters 
EPRO.M burner 
2758 or 2716 EPROM 

One aspect of the Franklin Ace computer that 
I enjoy is the upper/lower case and lU-kcy pad 
keyboard. As a programmer on a mainframe 
computer system, and in writing a terminal 
driver for my Franklin Ace 100 to work via a 
modem onto the mainframe, this almost- 
complete keyboard still wasn't enough. 

This keyboard does not generate the printing 
characters backslash, tilde, accent, bar, and the 
non-printing characters <DEL?- ,<Field 
Separator>, <Group Separator>. <Record 
Seperaior>, and <Unit Seperator>. 

Afier esuniinitig the keyboard circuitry, I 
found that each key, when pressed, addresses 
an EPROM which in turn outputs the 7 bit 
ASCII value for that key . All 1 needed to do 
was to re-program the EPROM with the missing 
characters and then I could generate the full 
ASCII cliaracter set. 

The EPROM in my keyboard was a 2758. 
24 pin. IK EPROM. I had a spare 2716, 24 
pin, 2K EPROM which happens to be pin- 
compatible. On the adjacent page is a dump of 
my old 275 B keyboard EPROM with the 
changed values listed along side The listing is 
divided into different combination groups of 
each of the special select keys. Lock, Control 



and Shift. You will notice that the hex value 
given for atiy particular character does not look 
familiar. These values are the complement of 
the ASCII value sent to the computer. For 
example, the character 'A' in the listing has the 
value $BE. After Exclusive-ORing the value 
with $PF. you get the value S4 1 , which is an 
"A." The changes I made are as follows. 





Qld 


new 


ASCI 1 


EPROM 


keyboard 


V3 1 ue 


ctiar 


value 


value 


Ctrl / 


$D0 


\ 


$5C 


$A3 


Ctrl • 


?D3 


' 


S60 


19F 


ttrhsfiift I 


?0E 


I 


m 


$33 


Ctrl - 


ID2 




57E 


S81 


> on keypad 


Ml 


<DEL> 


$7F 


S8S 


Ctrl-shift F 


$F9 


<FS> 


lie 


SE3 


Ctrl-shift G 


m 


<GS> 


JtD 


m 


Ctrl-shift R 


$ED 


<RS> 


$1E 


iEi 


ctri-shift U 


$EA 


<US> 


$1F 


$E0 



1 also changed my shift keys to be a toggle- 
case key as on the IBM keyboard, so that with 
lock off, shift produced uppercase, and with 
lock on, shift produced lowercase. 

With thi.s method, you can change any key 
to produce any ASCII value. Hovi'ever, since 
the letter '"A" is painted on the top of a key, 
it may be conftLsing if it generated anything else 
but an "A'". 

For those that may be interested, I have also 
increased the auto- repeat rate for the keys by 
replacing one resistor. I do not claim to be an 
expert in die elect ronics field, but if any readers 
have question.s about these procedures, their 
inquiries are welcoiuc. 
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The Keyboard map KHROM 



J000: no lock, rocntr) , roshi 


ft 














FF CD CE FF F6 8E 9£ SC 




2 


1 




tab q 


a 


5 




85 CC CB 9/1 80 88 9B 87 


z 


3 


4 


e 


r w 


d 


X 




9C CA C9 SB 86 99 98 S9 


c 


5 


5 


1 


y f 


R 


V 




90 C8 C7 U % 97 % 91 


■b 


7 


e 


u 


1 h 


J 


n 




DF C6 CF 90 8F 94 93 92 


spc 


9 


s 





P H 


1 


m 




D3 D2 C2 S4 A4 M 03 01 




- 


= 


{ 


[ : 


■ 






DO 55 6A FF 7C F? 77 FF 


/ 


i 


- 




brk cr 


*- 






FF 48 47 4B 4A 54 4E 41 




7 


8 


4 


5 » 


1 


> 


(keypad) 


4F 46 FF FF 49 40 4C 51 





9 






6 2 


3 




(keypad) 


FF FF FF FF FF 6C FF 64 










pau 




esc 




FF FF FF FF FF FF FF 52 














_ 


(keypad) 


FF FF , . , 



















JlOO: noloc-k, nocntrl, SHIFT 



FF BF DE FF F6 AE BE AC 
A5 DC DB BA AD A8 BB A7 
BC DA Al AE A6 B9 B8 A9 
6D m D5 AA B6 B7 B5 Bl 
DF D7 D5 BO AF B4 B3 B2 
C3 AO D4 82 A2 C5 DD Gl 
CO 55 6A FF K F2 77 FF 
FF 48 47 4B 4A 54 4£ 41 
4F 4S FF FF 49 4D 4C 51 
FF FF FF FF FF 6C FF $4 
FF FF FF FF FF FF FF 52 
FF FF 



1200: no lock, CONTROL, nosh i ft 



FF CO CE FF F6 EE FE EC 
E5 CC CB FA EO E8 F6 E7 
FC CA C9 EB £6 F9 F8 E9 
FO C8 C7 EA F6 F7 F5 Fl 
DF C6 CF FO EF F4 F3 F2 
D3 D2 C2 84 E4 C4 08 Dl 
DO 55 6A FF 7G F2 77 FF 
FF 48 47 48 4A 54 4E 41 
4F 46 FF FF 49 40 4C 51 
FF FF FF FF FF 6C FF 64 
FF FF FF FF FF FF FF 52 
FF FF . . 



The above key pattern 
IS repeated for eacfi 
select group 



New eprofii values 



D3 <ai> 


C2 


34 


E4 


C4 <9F> Dl 


A3> 55 


6A 


FF 


7C 


F2 77 FF 


FF 48 


47 


4B 


4A 


54 4E <80> 


4F 46 


FF 


FF 


49 


4D 4C <B3> 



FF FF FF FF FF FF FF <S1> 



mO: no lock. CONTROL. SHIF 



FF FF DE FF F5 EE FE EC 


FF 


FF m> 


FF 


F6 


EE 


FE 


EC 


E5 DC DB FA ED EB FB E7 


E5 


DC DB 


FA 


<E1> 


EB 


FB 


E7 


FC DA Al £B £5 F9 FS E9 


FC 


OA -;E1> 


EE 


E6 


<E3><E2> 


E9 


FD D9 D5 FA F6 F7 F5 Fl 


FD 


D9 05 


<E0> 


F6 


F7 


F5 


Fl 


DF D7 D5 FO EF F4 F3 F2 
















C3 AO D4 82 E2 C5 DO CI 


C3 


<E0> D4 


S2 


E2 


05 


DD 


CI 


CO 55 6A FF 7C F2 77 FF 
















FF 48 47 4B 4A 54 4E 41 


FF 


48 47 


4B 


4A 


54 


4E 


<80> 


4F 46 FF rr 49 4D 4C 51 


4F 


45 FF 


FF 


49 


40 


4C 


<S2> 


FF FF FF FF FF 6C FF 64 
















FF FF FF FF FF FF FF 52 
















FF FF , . . 

















$400- LOCK, nocnrrl, noshift 



FF CD CE FF F5 AE BE AC 

A5 CC CB BA AO AS BB A7 

BC CA C9 AB A6 B9 BS A9 

BD C8 C7 AA B6 B7 B5 Bl 

DF C5 CF BO AF B4 B3 B2 

D3 02 C2 84 A4 04 D8 Dl 

DO 55 6A FF 7C F2 77 FF 

FF 48 47 4B 4A 54 4E 41 

4F 46 FF FF 49 40 4C 51 

FF FF FF FF FF 6C FF 54 

FF FF FF FF FF FF FF 52 
FF FF 



FF 4S 47 4B 4A 54 4E <80> 



1-500; LOCK, nocntrl, SHIF 



FF BF DE FF F5 AE BE AC 


FF 


BF 


DE 


FF F6 <8E><9E><8C> 


A5 DC OB BA AO A8 BB A7 


<35> 


DC 


OB 


<9A>-:8D>-;88><9B><87> 


BC DA Al AS A6 S9 ES A9 


^9C> OA 


Al 


^8G><85><:99><98><89> 


BO D9 D6 AA B6 67 B5 Bl 


<9D> 


D9 


D5 


<8A><96><97>t96><91> 


DF D7 D6 BO AF 64 B3 B2 


DF 


D7 


06 


■:90>^8F><94><93><92> 


C3 AO 04 BZ A2 C5 DD CI 










CO 55 6A FF 7C F2 77 FF 










FF 48 47 4B 4A 54 4F 41 


FF 


48 


47 


4B 4A 54 4E <80> 


4F 46 FF FF 49 40 4C 51 










FF FF FF FF FF 6C FF 64 










FF FF FF FF FF FF FF 52 










FF FF ... 











03 <-81.> 


C2 


84 


E4 


C4 


<9F> Dl 


A3> 55 


6A 


FF 


7C 


F2 


77 FF 


FF 48 


47 


4B 


4A 


54 


4E <Z0> 


4F 45 


FF 


FF 


49 


4D 


4C <83> 



$600: LOCK, CONTROL noshift 

FF CD CE FF F6 EE FE EC 

E5 CC CB FA EO EB FB il 

FC CA C9 EB E6 F9 FS E9 

FD C8 C7 £A F5 F7 F5 Fl 

DF C6 CF FO EF F4 F3 F? 

D3 D2 C2 84 E4 C4 DB Dl 

DO 55 6A FF 7C F2 77 FF 

FF 48 47 4B 4A 54 4E 41 

4F 46 FF FF 49 40 4C 51 

FF FF FF FF FF 6C FF 64 

FF FF FF FF FF FF FF 52 FF FF FF FF FF FF FF <3I> 

FF FF . 



1700; LOCK, CONTROL. SHIFT 

FF FF DE FF F5 ££ FE EC 
F5 DC DB FA FD F8 FB E7 
FC DA Al EB EG F9 FB F9 
FD D9 05 EA F6 F7 F5 Fl 
DF 07 D6 FO EF F4 F3 F2 
C3 AO 04 82 E2 C5 DD CI 
CO 55 6A FF 7C F2 77 FF 
FF 48 47 4R 4A 54 4F 41 
4F 46 FF FF 49 4D 4C 51 



FF 


FF <83> 


FF F6 


EE 


FE EC 


E5 


DC DB 


FA <F1> 


F8 


FB E7 


FC 


OA <E1> 


EB EG 


<E3><E2> E9: 


FD 


09 D5 


<E0> F5 


F7 


F5 Fl 


C3 


<E0> D4 


82 E2 


C5 


DD CI 


FF 


48 47 


4B 4A 


64 


4E m> 


4F 


46 FF 


FF 49 


4D 


40 <S3> 
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Modified F8 ROMs 
On the Apple /// 



by Eric Deslauriers 



"Requirements: 

An Apple ill 

A copy of the Emulation disk 

A normal DOS 3.3 Disk 

Huvc you ever been disappointed by seeing 
a "flip Integer switch and liit Reset" message 
in the midst of a sofiicey or had no way of 
breaking out of a protected program without tjie 
Ctrl-Reset {whieh does littk good if yoti are 
trying to crack programs)? Well, now you can 
stand up and cheer because the software 
modificaiinns in this anicle will allow you to 
use the Modified FS ROM written by Ernie 
Young in COMPIJTIST #fi_ pg 14. (That issue 
is tio longer iivitilable, but the hc^dump Is 
supplied here.) 

This, modified ROM allows the user to select 
between a normal autostatt leset, an old monitor 
style reset, or one that saves memory locations 
mma-%mm and puts them in locations 
$20«0-$29M, This option will also save the 
Stack pointer at location $2891 . The new code 
is luci^ed itiio the F8 area by eliminating the 
cassette I/O. 

The best part about this procedure is that you 
don't have to mess around with burning 
EPROMs (Eraseabie Programmable ROMs). 
And the co.si of this is a little lime and a disk. 

This procedure was bom of a necessity to be 
able m hit Reset and be dropped into the 
monitor. After getting very frustrated at the 
Lode Runner softkey (COMPUTIST No. 22, 
pll), I decided to try to have my Emulation disk 
tell my Apple HI that it had a different ■ ■ROM' ' . 
This procedure was accompanied by much 
swearing and a lot of learning. Rut, as a novice 
at machine language and a lol of everything 
else. I am very proud to have accomplished this. 
And, sometimes. 7 am very happy that I decided 
to do this. 



The Procedure 

h Make u dLiplicatc copy of your Emulation 
Disk and hide the original, 

2) Insen your copy of the Emulation Disk into 
llie inienml drive and turn your computer on. 

3) Boot up with Applesoft BASIC. For those 
of you unfamiliar as to how to gel into 
Applesoft, boot the Emulation disk {insert it into 
the internal drive and piess Ctrl-Reset or turn 
your Apple on). When presented with the menu . 
press ESCAPE. At the top of the screen, an 
arrow will be pointing at the choice labeled: 

LANGUAGE; APPLESOFT INTEGER 
Using the right or left arrow, move the light 
bar onto the choice labeled APPLESOFT, 
Insert your DOS 3.3 disk (You must have a disk 
with normal DOS 3.3 because one of the 
accompanying programs. SREAD/SWRITE, 
use locations specillc to DOS 3.3.) and press 
RETURN to boot it. 

3) Exit your HELLO program, clear memory, 
and hop into the monitor by typing: 

FP 
CALL -151 

4) Then type in the he>;dump of 
SREAD/SWRITE, which can he found in 
listing 1, This program by Bryan Farlow and 
Robert Knowles appeai-ed in COMPUTIST No 
24, p 16. It is used to load a sector into memory 
and to write it back onto disk. But remember 
this; SREAD/SWRITE will ONLY read and 
write from and to the di.sk in drive one. For 
more infonnalion. you should refer to that 
anicle. Save SREAD/SWRITE with; 

BSAVE SREAD/SWRlTE,A$3ee,L$A4 

5) Exit the monitor and clear memory by typing 

FT 



6) Type in the BASIC program, 
TRACKMOVER, found in listing 2. This 
program will use the SREAD/SWRITE 
program to load one of the disk's tracks into 
the memory at the location we tell it to load into. 
Save it with 

SAVE TRACKMOVER 

7) Clear the program and enter the monitor 

again . 

FP 
CALL -151 

8) Type in the modified F8 ROM hexdurnp 
found in listing 3. Sai'e tl with 

BSAVE PSUED0-R0M,A$2ECD,L$SA 

9) Hop hack into APPLESOFT with 



10) The Emulation disk has two tracks that have 
to be modified for the ROM (o be changed. 
Track 5 coniains ihe "ROM" for INTEGER 
BASIC and track 9 contains the "ROM" lor 
.APPLESOFT. You may or may not want to 
change the INTEGER "ROM". I changed 
them both for curiosity and for conformity. 

There is a confusing aspect to the memory 
for the "ROM' ' . Apple decided not to have the 
ROMs st,-irt at the same sector (different tracks) 
on the disk. This means that, when the tracks 
are loaded into memory, the INTEGER 
■■ROM" Starts at x9CD while the APPLESOFT 
"ROM" starts af x4CD f'\" being [he page 
the track was loaded into.). This makes the 
changes a littie more confusing but nut too much 
so. 

11) Run "fRACKMOVER and then insen your 
Emulation disk in drive 1 (be sure it's in drive 
1!). Now wc will load track 5 at SSflM by 
typing what is indicated after the pioiiipls 
below, 

RUM TRACKMOVER 

(You DID insert your Emulation disk, right?) 
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READ/WR[TF (R/W) ■ R . 
SREAD TRACK : 5 
HEX LXATOfI -m 

Answer Y to SREAD ANOTHER TRACK'' 
and luad track 9 at S^mii by typing 

V 

9 

12) This time [y[K N and you will be dropped 
into the monitor, 

13) Use the monitor move command to copy 
the modified ROM hexdump (thai we 
previously stored in memory) onto the track 5 
and track 9 images. 

59CD<2KCD.2F27M 
44CD<2ECD.2F27M 

14) Now the Reset vectors have to point to the 
new eode su that when Reset (nui Ctrl-Reset 
as the computer will reboot and become an 
Apple III} is pressed, the program is executed. 
Unlike the Apple II owners, though, we had 
better not change the NMl (Non Maskable 
[nierrupt) vectors; because if we do, ever>' time 
we press. Reset, the computer goes ofTand beeps 
a1 you just about forever. 

Change the RESET vectors with 

SAFA:CD FE 
45FA:CD FE 

15) Exit the monitor with ESC] . If you try 
anything else (such as EM.IG or 3D0G), the 
computer will let you hit RETURN several 
times and (hen go into a Frenzied fit. 
Furllierraore, any command you type in will be 
answered with 7SYNTAX ERROR, 1 haven't 
found out why this occurs yet. Anyone have an 
answer? 

16) Run TRACKMOVER and save track 5 
from !E5fl(M by typing 

RUN 
W 

5 

5m» 

Aiiswei' Y and save track 9 from $4000: 

Y 

5 



17) Voilal!! Now. evcrj' time you need to 
RESET out of a protected program, jus! boot 
your altered Emulation disk and go to it. Who 
needs chips and burners when ya got an Apple 
IIH' 

A Short Tutorial 

As the proud owner of your new F8 ROM, 
it is only titting that you learn how to use it. 
Lucidly, the new F8 ROM isn't very hard to 
learn how to use. 

To start learning, boot any Apple n disk. 
When the disk finishes booting, press Re.set. 
The system will "liatig." Actually, it is waiting 
for you to press one of three keys. The.';e keys 
are the Return key, tlie "-" key, and the ":" 
kcv. 



For an atjtostart ROM Reset (die one you 
Lsaally get when you hit Reset), press the 
Return key. Look familiar? 

This time, we'll try for an old style Reset. 
This Reset will just drop you into the monitor. 
Press Reset again and then press the '"-" key, 
Did the "**" prompt show up at the bottom of 
the screen? This will let you snoop througli the 
code. No more rebotjb with this baby! 

Now for the Saver ftineiion. Press RESET 
once more. This lime press the ":" (shift ";") 
key. Did the .screen clear and the "*" prompt 
show up at tlic bottom of the scjeen'' 

What this just did was to take whatever was 
in memory locations S0M0-$Ci9W) and store the 
values in kK-ations 520t)fl-529#). Then it saved 
the slack pointer at $290 1 . 

That's all that'.s needed to know to u.se yoitr 
new ROM. Enjoy your cracking! 

Sread/Swrite (Issue No. 24) 



THENCOMS = "SREAD" 
TH£NCOMi = "SWITE" 



0300: 


A0 04 B9 43 03 99 93 AS 


S193C 


0308; 


88 10 F7 A0 05 B9 4D 03 


S3C10 


0319: 


99 Ce AS 88 10 F7 A9 D4 


$CBF8 


0318, 


6D 41 A9 A0 03 69 53 03 


S2EF7 


0320: 


99 bD A9 88 10 F7 A9 40 


S9E0F 


0328: 


8D 11 A9 8D 25 A9 A9 71 


SC6CD 


0339: 


SD 12 A9 SD 2G A9 A0 02 


SB7E] 


0333: 


B9 57 03 99 F0 A4 B9 5A 


$C8D4 


0340: 


03 99 98 A2 88 10 Fl 60 


Se83F 


0.348, 


53 52 45 41 C4 53 57 52 


S347F 


0350: 


49 54 C5 00 00 0F 00 4C 


S81BA 


0358: 


65 83 4C 5D 03 A9 82 SD 


$5085 


0360' 


% 03 4C 6A 03 A9 01 8D 


SCAC6 


0368: 


9B 93 AD 66 AA BD 93 03 


SFC54 


0370. 


AD 6A AA 80 94 03 AD 72 


S279F 


0378, 


AA 8D 97 03 AD 73 AA 8D 


S0A53 


0380: 


98 03 A3 03 A0 BF 20 D9 


S52£5 


0388: 


03 A9 06 8D 5A AA 60 01 


SB00B 


0390: 


60 01 00 00 00 A0 03 00 


SD64A 


0398 


00 90 00 00 00 00 50 01 


SC70A 


03A0: 


00 01 EF D8 


S8F9B 



F8 ROM Patch (Issue No. 6) 



2ECD 


2C 00 C0 


S0E8B 


2ED9 


10 F8 W 10 C0 AO 00 C0 


SB6A9 


2ED8 


C9 2D F0 7D B0 03 4C 62 


S1B98 


2EE0 


FA BA 8E 01 29 A0 00 B9 


SD15A 


2EEa 


00 00 99 00 20 B9 00 01 


S9B59 


2EF0 


99 00 21 4C FD FE 20 00 


$1FE5 


2EF8 


FE 58 68 D0 6C C8 D0 E7 


SC5C5 


2F09 


84 3C 84 42 84 3E A9 09 


S2A77 


2F08 


85 3F A3 02 85 3D A9 22 


S9E7A 


2F10 


85 43 20 2C FE 20 2F FB 


SF0AC 


2Flfl 


20 58 FC 4C 59 FF 60 


S55F7 



TrackMover 



1 REM * = '*"' = *' = **"*'* ****** 
20 REM TRACKMOVER 
30REM BV ERIC DESLAURIERS 
40RtM(;OPYRIGHI 1985 CDMPUl I SI 

60 HOME 

70 IF PEEK (768 ) <> 160 THEN GOSUB 360, 

80 FLASH , VTAB 2 . PR INI ''BE' SURE' TH£^ 

EMULATION' DISK" IS" IN' DRIVE' 1" 

NORMAL 



GOTO 140 

:OTO 

TRACK, ^ ■' 



90 PRINT , PRINT "READ' OR" WRITE" TRACK? 

(R/W)" ; 
100 GET A$ 

110 IFAS = "R" 
120 IFAS = "r 

140 
130 GOTO 100 
140 PRINT . VTAB 8 , PRINT COM$ 

. : INPUT '■" ,HEX$ . GOSUB 270 
1 50 TK = DEC : I F TK > 34 THEN PR i NT '■NO' 

TRACKS' ABOVE" $22" ■ GOTO 140 
160 VTAB 10 : PRINT "HEX" LOCATION." " ; . 

INPUT"" :HEXS • GOSUB 270 
170 LX = DhC : IF LOG < 8192 THEN PRINT "NO" 

NUMBERS" LOWER" THAN" 52000" PLEASE" r 

GOTO 160 
180 IF LOC > 38400 THEN PRINT "NO" NUMBERS" 

HIGHER' IHAN' S9600' PLEASE" : GOlO 

160 
190 FOR SEC = 15 TO STEP -1 
200PRINTCHRM'4).COM$. "' T" ,TK. " ,S" 

:SEC: ".A" ;LOC 
210 LOC ^ LOC + 256 
220 NEXT SEC 
230 VTAB 12 . PRINT COH$, "" ANOTHER" TRACK?" 

(V/N)" . : GET AS : IF AS = "V THEN HOME 

: GOTO 140 
240 I F COM$ = "SREAD" THEN CALL - 15 1 
250 END 
260 REM 

* * * CHANGE HEXS FROM HEX TO DECIM- 
AL (DEC) 
270HX$ = "01234567a9AeCDEF" ,DEC = 
280 FOR I = 1 TO LEN (HEXS ) 
290C = ASC ( MIDS (HEXS .1 , 1 ) } - 48 
300 IFC>9THENC = C'7 
310 IFC<0ORC> 15 THEN PRINT "YOU" HAVE" 

MISTYPED" THIS" NUMBER," : GOTO 148 ' 
320DEC = DEC + C + 15 * DEC 
330 NEXT I 
340 RETURN 

350 REM =J= * * BRUN SREAD/SWRITE 
360 PRINT "INSERT" THE* DISK' l^lTH' 

SREAD/SffRlTE" : INPUT "AND' PRESS" 

RCTURN." ;XS 
370 PRINT CHRS (4 ) . "BRUN" SREAD/SWRITE" 
380 VTAB 5 : PRINT "NOW" INSERT" VOUfi" 

EMULATION" DISK" INTO" . INPUT "DRIVE" 

1" AND' PRESS" RETURN" :XS 
390 HOME : PRINT : RETURN 

controller checksums 
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- IBADD 


210 


- S05C4 


20 


- S9B13 


220 


- SE0C1 


30 


- S4D3B 


230 


- 13996 


40 


- SAD92 


240 


- S944F 


50 


- SC899 


250 


- $B693 


60 


- SDAF7 


250 


- $A7A3 


70 


- S6AB4 


270 


- S0OEC 


60 


' S9555 


280 


- JB45A 


90 


- S35EF 


290 


- SBF67 


100 


- S55DC 


300 


- J580E 


110 


- S3657 


310 


- $9813 


120 


- S54CD 


320 


- i2F0F 


130 


- SEB5C 


330 


- SF3C7 


140 


- S0E5E 


340 


- SAeSA 


150 


- SE8Z6 


350 


- $0ABF 


160 


- S6E49 


350 


- $B50A 


170 


- S4E6E 


370 


- $A82D 


180 


- S2E58 


380 


- $F888 


190 


- S199B 


399 


- $C032 


200 


- SAA4D 
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by Steve Ellis 



Datasofi 

Requirements: 

A( leasi 4SK 
A blank disk 
Sands of Egypt disk 
A sector editor 

Sands of Egypt is an interesting and difficult 
adventure game that has some pretty good 
animated graphics. Its protection techniqtie 
seems unusual at first glance, bm after a little 
investigation it can be found that all it consists 
of is a nibble count. 

The disk contains useful information from 
tracks $0-Si I . and after that the rest of the di.sk 
is filled with garbage. The first step I made in 
deprotecting it was to copy the first $12 tracks 



softkey for... 



0, looking lor a similar pattern - that is, a sector 
with the same value i-epeated in bytes S95-$FF. 
1 found what I was itxiking for on track 0. sector 
$E. This sector contained what seemed like 
garbage, but bytes S95 through $FF were all 
the same value ($75). which followed the 
pattern of page $9 1 in memoiy. 

To double check, I disassembled page $91 
in memory and found that the encrypting routine 
was at the beginning of that page, and that the 
data was encrypted by EORing each byte from 
$9 UD to $91 FF with $D5. This can be verified 
using the Senior Prom sector editor. Read in 
track 0, sector $E and exclusive-or (he buffer 
with SD5. Disassembly wiil show the nibble 
count eode starting at byte $ID. So to disable 
the routine that did the nibble count, al! that was 
necessary was to EOR a $60 (for RTS) with 
$D5 and write the resulting byte to disk at byte 
$1D of track ft, sector $E. Doing this worked 
fine, except that the disk drive did not turn off 
once the game started. So I encrypted the values 
for LDA SC088,X (to turn off the drive), and 
wrote those to the disk at byte SID, and 



tracks. If you do not have such a program, 
COPY A can be modified as follows; 

RUN COPYA 



CALL-lSl 
302:12 N J5F:12 

Pe l 

DEL 70 
RUN 

2) Using a seaor editor, write the following 
bytes to the copy: 



0. Sector 


SE: 




Byte* 


From 


To 


JID 


170 


S68 


SIE 


$2B 


150 


SIF 


$5E 


Hi 


S20 


S41 


m 



3) The softkey is complete at this point. If you 
want to free up tracks $12-S22: 



Sands of Egypt 



with the Manual Sector Copy on Copy 11 Plus. 
When I booted this copy, it loaded the hi- res 
title page then htmg while accessing the disk. 
I assumed it was pcriorming a nibble count, so 
I NMFd the program with my Wildcard and 
disassembled the program eode where it had 
been executing. Sure enough, right there was 
a long sequence of LDA $C08C,X instructions 
followed by CMPs to various values. 

Tracing backwards from there. 1 found that 
the nibble count routine staned at S9I ID in 
memory. On the original disk this routine is 
erased after the nibble count is successful, so 
the only way to see it is to boot the copy. I wrote 
down the first five bytes of the routine and 
searched the disk for them. Unfortunately, they 
could not be found anywhere. This led me to 
believe that Datasoft was encrypting the code 
on the disk, then decrypting it after it was read 
into memory. 1 examined the memory on page 
$91 (which was the only page that contained 
any sttspicious code), and found that bytes 
$95-$FF were all $A0, Then I started 
examining sectors, starting with track 0, sector 



followed them with the RTS byte. This 
produced a working copy of Sands of Egypt. 

Extra Room 

If you CATALOG the copy (or the original, 
for that matter) you will see one program called 
HELLO. This is a dummy program which 
cannot be accessed. But it shows that the disk 
has a normal VTOC and normal CATALOG 
sectors. For this reason, the blank tracks on the 
disk (tracks $12-,$22) can be used for files. All 
that is necessary is to fix a few CATALOG 
sectors, and to fix the VTOC to show tracks 
S0-S1 1 as being full and tracks S12-$22 as free. 
The procedure is shown below. Note that this 
step is not necessary for the softkey to work; 
it is ju,st an added feature. 

Step By Step 

1) Copy the original disk (tracks $0-$l 1 only) 
using any program that will copy individual 



a) DELETE HELLO from the Sands of Egypt 
disk. 

b) With a sector editor, read in track $11. sector 
SE. It should contain random garbage. Zero out 
the entire sector buffer, and change bytes 1 and 
2 to $1 1 . $0D. Write the sector back to disk. 
The same should be done for sectors 
$D,SC.SB.$7.$6.S5,$4. and $3, On each 
sector, change byte 2 to the number of the sector 
minus one. In other words, sector SB, bytes I 
and 2 would read $11, $0A, and .so on. 

c) Read in the VTOC (ttack $11. sector 0). Zero 
out the buffer from bytes $3S-SFF. At byte $80. 
write 2 $FF's. Skip to byte $84 and write two 
more SFF's, Continue this pattern (write 2 
SFF's, skip 2 bytes, write 2 SFF's), stopping 
at byte SC4. That is, bytes .$C2 through SFF 
should all be zero. Write this modified VTOC 
back to disk. 

d) Now you can use the disk for saving files. 
You will have 272 free sectors to use. „ 

a 
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by Scott McCandless 



D/.A-f, l„r. 

1 DIM Park 

AUen TX ?5m2 

Kequiremeitt!;: 

Number Fum: diskeLle 

COPY A 

A sector editor 

1 would likt U) puss oil lo you a softkey I huve 
made using an interesting patch to DOS for 
slowing the boot process of a disk. This change 
can slow down the booi of a disk h>' 4 times 
oi, in comparison: 14 seconds for llie normal 
disk compared [o 63 seconds for the patched 
disk. The disk 1 am referring lo is one of the 
iates packages from DLM & Neosoft. 
"Numbec Fanns," Theciiaiige [ made allowed 
me to witness the boot ai a pace thai is easier 
for me to watch and decipher. 

In the past. DLM only protected their di.<;ks 
by altering the data and addres-i epilogues. 
Well, now not only have ihey uboiished that 
worthless idea. huT they have decided to include 
a nibble count umo a disk thai is COPYAable; 
"Learning With Fuzzy womps" haunts rac. 

The Protection 

Ever since my mother has purchased 
educational programs for herself, she has 
always wanted me to make reliable backups, 
and write simply bit copies usually cuiniot 
handle the newest protections. So, I decided to 
gel mto the ever increasing world of 
dcprotection and liberation of my original 
software packages. Now, this disk posed a 
problem to me because it had a nibble count 
farther into the hoot than I preferred to boot 
ctxlc trace. And not only that, the disk doe.s not 
have a normal catalog. The VTOC is located 
on track SI 1 sector U. while the actual catalog 
was located on track 3, which I could not get 
a successful listing without capturing their DOS 
and eJtecuting an "A56EQ" (directly calling 
the catalog) from the monitor. At this point I 
decided Ihal Demuffin Plus was not going to 
do it, so ] decided to COPY A the disk. After 
doing so, die disk would continually lebool. So, 
the next step was to search for a re-boot routine. 



Liocating the Protection 

.As everyone should kndW', looking for the 
JMP $C(j00 it the most likely place to substitute 
a jump to the monitor (JMP $FF59). Well, upon 
doing that and booting the disk, it once again 
rc-bootcd without jumping to the monitor. After 
that unsnccessfiil ti"y, I was ready to try 
anything, As I was looking for, some disk read 
routines (LDA $C08C,X) I came across the 
instruction LDX ^Sl I on track SO sector M. 
After changing the instruction to LDX #S00. 
1 rebooted the dLsk. Upon booting the disk, 1 
noticed how slow it loaded and I thought to 
myself, "this is great!'' After watching the disk 
hoot. I noticed that it loaded tracks 
0,2, 1 ,0.1 1.3, then went to track 6. where it then 
moved the drive cam to track and rebooted. 
if, however, the nibble count passed, the disk 
would continue and load the rest of the 
program. After this little view of the boot. 1 
came to the conclusion that the routine must be 
on track 6. When 1 looked at track 6 for some 
funny routine, 1 came upon the following code 
on track 6, sector $D: 



xxQt: 


A9 00 


LDA »%m track to count 


XX19; 


85 fC 


ETA $rc 


m2- 


A? 03 


LDA m\ 


XxU: 


BC 49 90 


LDY $9049.); 


Ml7. 


91 FA 


STA (iFA).y 


KxlA, 


CA 


DEX 


JotlC: 


10 F8 


BPL Jxxl4 


}!xlD: 


48 


PHA 


nlE: 


M 3C 90 


JSfi $903C 


xx21; 


A0 01 


LDY m\ 


xx23' 


Bl FA 


LDA (■$FA).r 


tm-. 


AA 


TAX 


XX26: 


30 58 90 


JSR 19058 call count 


xx29; 


68 


PLA 


xx2A: 


6a 


PLA 


xx2B: 


A0 00 


LDv nm 


xx2D 


84 FE 


STV JFE 


xx2F; 


B9 40 90 


LOA $904D.Y 


xx32; 


69 80 


ORA SS80 


XX 34 : 


20 39 90 


JSR 19039 


Xx37: 


A'S FE 


LDV JFE 


xx39' 


C8 


INV 


xx3A. 


4C 29 90 


JMP $9029 


xx46' 


A9 m 


LDA #500 


xx48- 


85 48 


STA J4S 


xx4A- 


B0 5D 


BCS }xxA9 


xx4C, 


60 


RTS 


..If 


everythir 


g IS OK. run hel lo 



Now, for an explanation of ihe above code, 
Bytes S0E through SI A do a memory move and 
set up the nibble count parameters (changing 
byte SfflF will make the drive cam seek a 
different track for the nibble count). Bytes JIG 
through $26 set up the final parameters and call 
the nibble count routine. The rest is pretty much 
clear: if the count fails then the hello Ole is not 
run, and the piogram jumps to a reboot routine. 

Step by Step 

1) Run COPYA and copy Ihe disk. No 
modifications are needed. 

2) Pull out your sector editor and read in track 
$&6 ,'iector $D, Starting at byte $26, change the 
bytes 20 58 90 (LSR S9058) to EA EA EA (three 
NOPs). 

i) Write the sector back to the disk and boot 
ii up! 

Now, if you would like to see the slow boot 
process before you take out the copy piotection, 
run your sector editor and do the following: 

1) Read track $0. sector $04 from your newly 
copied backup 

2) Change byte $01 from SI I to $00, 
i) Write the sector back to your disk, 

4) Remove the case from your disk drive, if 
possible, and watch the disk boot real 
sloooooooow... 

5) Watch it access track $6 then go to track $0 
for the nibble count. 

6) Don't forget to undo the change after you're 
through having tlinl 

For your information, the patch shown here 
changes llie timing loop (at $B9FD-BA 10.) used 
to wait between .steps of the drive arm. SI I is 
the usual value. The patch is effective for just 
about any DOS disk. Just search for SA2 1 1 
CA (LDX //$l 1. DEX) and change the $1 I lo 
either STO, $1 1 . or $22. Those are the only valid 
bytes I have been able to change them to that 
have any eliect at all on the speed of the boot. 
Changing the value to $00 will slow the boot 
down greatly, while changing it to $22 will slow 
it down some, but will also make the disk run 
a lot quieter. i,c. Stii's Computer Quanerback 
boots whisper quiet. 1 have found that changing 
the Sll to any other value makes the drive 
motor make funny groaning noises as it tries 
to seek from track to track. ^^ 

A 
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1^ AGENT U.S.A. it 



by Bill Johnson 



Scholastic, Inc. 

293} East McCanv Si. 

P. O. Box 7502 

Jefferson City, MO 65!&2 

Requirements; 

Agent U.S.A. 

64K iir more 

COMPUTIST Ny. !9 

48K slave disk with no hello program 

Agent U.S.A. is an arcade siyle game in an 
educational package. You, as agent U.S.A., are 
to destroy the fu^Aonib before Ihe entire 
population otthc U.S. is turned into fuzzkxlies. 
ti is designed to entertain while teaching U.S. 
(geography, math skills, and problem .wiving. 

The program is difficult to backup with bit 
copier.s since it accesses tracks I, 1.5, and 2. 
I have been vuccessful using the following 
parameters with E,D,D, lit and wnukl 
recommend using a backup for ihis suftkey. 
Copy tracks 0.1,1,75 mode 5 then tracks 1-A 
mode 1 Now, on wiih the soflkey, 

.Since the program Ifiads in completely at 
bootup, f decided to convert it to a normal DOS 
.1,3 Hie, To do thi.s we must save any memory 
that is lost when booting a standard DOS disk 
in a safe place. The lii-res pages (S2WflW-.$5FFF) 
are available Tor our temporary use and they 
provide more than enough space for our needs. 

The first problem is how to save memory 
from $0-J7rr since much of this memor>' is 
altered when we reset. The ideal solution would 
be Carl Taylor's FR ROM, biil I have no desire 
to modify my motherboard to accept EPROMs. 



With a little inodillt;ation. we Lun use a RAM 
version of this FS ROM which will work jusi 
as well in many instances. 

To niiike your RAM/ROM, follow the 
procedures out]ine,d on page 18 of 
COMPUTIST No. 19 through step #3, Before 
saving the code, we will add a short routine to 
move it to the proper destination in our RAM 
card and turn it on. 



2/D7- 


2C 31 C0 


BIT 


SC081 


27DA- 


2C 81 C0 


BIT 


5C081 


27DD- 


A9 60 


fDA 


#$00 


27DF- 


S5 42 


STA 


$42 


27E1- 


A9 F8 


IDA 


ftSFg 


27E3- 


85 43 


SI A 


S43 



27E5- 


A9 00 


IDA 


ifim 


27E7- 


85 3C 


STA 


S3C 


27E3- 


A9 28 


LDA 


.«$28 


27EB- 


S5 3D 


STA 


S3D 


27ED- 


m PF 


LDA 


mf 


27EF- 


85 3E 


STA 


S3E 


2/Fl- 


A9 2f 


LDA 


H2F 


27F3- 


85 3F 


STA 


S3F 


27F5- 


A0 00 


LDV 


ffS00 


27F7- 


n 2C FE 


JSR 


$FE2C 


27FA~ 


2e -80 C0 


BIT 


K&m 


27FD- 


4C 69 l-f 


JMP 


SFF69 



Save your new RAM/ROM to disk, 
R.SAVE BAM/ROM. A$27D7.L$829 






IF YOU DO HOT STOP THE FUZZ, 
IT HILL SPREAD IM ALL DIRECTIONS 
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Now. we can install the new Fealnres of the 
altered ROM inlti lhif-RAM card by typing 
BRUN RAM/ROM. 

In order to keep the program from tumjnj; 
off I he RAM card we must alter Boot 1 (Traek 
0. Sector B) siightjy. Move the disk controller 
ROM to S86fl0 and modify it to exit to the 
monitor after loading Boot 1. 

Mm<C6m.C6¥FM 
86F8:4C 59 FF 

CflES 

If you list the code at SSOl ytM will see ihar 
the tnotherboard ROM is turned on al address 
$ti I A . Wc need to NOP this command to keep 
our RAM F8 in coiilrol. Ne\t, relo<;ale the 
modified code to S86F8 and execute it. 

81A:EA EA EA 
86F8<8B1.SFFM 
8r;(H)G 

Tlie program should load in compleiety. 
After the drive stops, press Ctrl -Reset Ibl lowed 
by S. You will be returned to the monitor alter 
$a-$KFF ha.s been saved to ,'E2flM-S28FF. We 
must now move $9t}fl0-$BFFF to a safe area 
belort; booting our 48K slave. S-1600 i^ n 
eoitvenienl location. 

Ctrl-Reset S 
36e«<96fle.BFFFM 

(Insert 48K slave and boot it) 

6 [RPl 

The lyst step prior to saving the prograin is 
to add a routine to restore memory and junip 
to the start of the program, 1 prefer to use the 
monitor move routine except where the icio 
page is involved, so this routine gives two 
different examples of moving niemory. (See the 
box for the listing). 

Before we save the file we need to place a 
jump to our restore routine at the beginning of 
the file and modify DOS to allow BSAVEing 
a file this large 

8FD:4C m It 

A964:FF 

RSAVE AGENT USA, A$8FD,L$8M3 

The Cookbook 

1) Create and install the RAM version o( the 
modified F8 from COMPUTIST No. 19. 

BRUN RAM/ROM 

2) Alter Boot I to keep the RAM card selected 

86»«<C6»e.CfiFFM 

C6F8:4C 59 FF 

8600C 

CflES 

81A:EA EA EA 

iW»I'T(<8fll.8FFM 

3> Execute it. 
86000 



4) After the drive stops, reset and save S0 - 
$8FF using the 'modified RAM'. 

Ctrl-Resel S 

5) Move the DOS area of memory to a safe 
place 

.16fte<96ft».BFFFM 

6) Insert 48K slave with no hello program and 
boot it. 

6GB 

CALL -151 

7) Add a memory restoie routine 

29TO:A9 flfl 85 42 A9 % 85 43 
29»8:A9 flfl 85 M: A9 36 85 30 
2910:.49 FF 85 3E A9 5F 85 3F 
2918:A» m 28 2C FE A2 Oft BD 
292fl:fl» 28 95 ee BD8»2I 9D 
2928:«» 01 BD 8» 22 9D 08 82 
293e:BD 88 23 9D 08 83 BU 08 



2938:24 9D 88 04 BD 88 25 9D 
2948:08 85 BD 08 26 9D 08 86 
2948:BD «» 27 9D 00 87 BD 00 
2958;28 9D 88 08 E8 D0 C8 4C 

2958;37 88 

8) Place a jump tQ the restore routine at the start 
of the file. 

8FD:4C 8fl 29 

9) Alter DOS to allow the BSAVEing of large 
files and save the file, 

A964:FF 

BSAVE AGENT LiSA,A$8FD,L$8D03 

You now have u deproieeted Agent U.S.A. 
which 1 recommend FIDing to a disk with a fast 
DOS. Now get out Ihei^ iind destroy that 

fiizzbomb. 



i 



;S 


Listing of memory move routine for this softltey 

_„ ^____^ .^ -a 


HOVE S3600 - 

ii: 


S5FFF TO 195 


}0 
5 


- SBFFF 

._ * 


2900- 


A9 00 


IDA 


m 


zm- 


85 42 


STA 


W 


(Jest mat ion Lo 


2904- 


A9 96 


IDA 


SS96 




2906- 


8i.43 


STA 


143 


CestinatiDfi Hi 


2908- 


A9 00 


LDA 


nm 




290A- 


85 3C 


STA 


I3C 


Hermibve beginning Lo 


290C- 


A9 36 


LDA 


«S36 




290E- 


85 3D 


STA 


J3D 


Hermiovebegirtiing Hi 


2910- 


A9 FF 


LDA 


*SFF 




2912- 


85 3E 


STA 


S3E 


Hemiove end Lo 


29U- 


A9 5F 


LDA 


mf 




2916- 


85 3F 


STA 


$3F 


Hermwve end Hi 


29IB- 


A0 00 


LOY 


«I00 


Y register must be zero prior 


29 lA- 
* 


20 2C FE 


JSR 


JFE2C 


lo Q3\ lirg Meimiove 
_^ . ^ 


jit 




Hove £2000 - S28FF to 10 

t^ 


29iD- 


A2 m 


LDX 


SS00 




291F- 


BO m 20 


LDA 


%2me.x 




2922- 


95 00 


STA 


100, X 




2924- 


BO 00 21 


LDA 


$2100, X 




2927- 


90 00 01 


STA 


?0I00 


X 




292A- 


BO 00 22 


LDA 


12200 


X 


i. 


292D- 


90 90 02 


STA 


50200 


X 




2930- 


BD 00 23 


LDA 


$2300 


X 




2933- 


90 00 03 


STA 


S0300 


X 




2936- 


BD 00 24 


LDA 


52400 


X 




2939- 


90 00 04 


STA 


$0400 


X 




293C- 


BO 00 2& 


LOA 


S2M0 


X 




293F- 


90 00 05 


STA 


$0500 


X 




2942- 


BO 00 26 


LOA 


S2600 


X 




2945- 


90 00 06 


STA 


S0600 


X 




2948- 


BO m 27 


LDA 


$2700 


X 




294B 


9D 00 07 


STA 


$0700 


X 




294E- 


BO 00 2B 


LDA 


$2800 


X 




2951 


90 00 08 


STA 


$0800 


X 




2954- 


Eg 


INX 






2955- 


D0 C8 


BNE 


S291F 




2957- 


4C: 37 08 


.IMP 


S9837 


lump to program start 
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softkey for... 



Wavy Navy 



by Rich Etarip 



Sirius Software Inc. 
Sacramento, CA 

Rtquirements: 

Apple ]f Plus 

2 blank hiiualized disks with no HELLO program 

A sector editor 

Wavy Nuvy by Sinus Software 

Wuvy Navy is a challenging and quiie addictive overseas 'Space Invaders' type game from Sirius 
Soflw:ire. When I first hooted np Wavy Navy. I thought it was going to be a Simple 'Boot Code 
Trace and save the program' softkey because once the game is in memory, the disk is not accessed 
again. However, taking a second look (possibly u third and a fourth too) I found that I had spoken 
too soon, I suspeeted that there was something fishy about this protection because the game is 
a single load program and the disk is easy to boot code trace. 

After examining the program in nieiiiory, I discovered what this protection was built around. 
Not on the disk, but rather on the u.ssage of memory. The program lives from S800 to $BAFF 
with no spare memoiy in between. This could cause a problem m try lag to conven the program 
into a DOS 3,3 file. I ran into this same problem with another game about a year ago m Ihh time 
1 was prepared and 1 knew what 1 had to do to get this game on normal DOS. fhcrc are several 
diflcrent ways this can be approached but I chose the method that I felt would be easiest to dO; 
explain, and imderstand. What this softkey will involve is saving rnost of the game as a normal 
DOS 3,3 tile and storing the rest directly to the disk, using the RWTS to read it in Another problem 
is encountered here. The program occupies memory from $800 to $BAFK and the RWTS uses 
SB800 thru JBf'l'F, I thought about this for a while and figured that the best way to do it is to 
read 4 pages of memory into the text page which is fjoni $4M to S7FF, That way there will be 
Just enough room ftir the RWTS. 

The program will be .saved and loaded as follows: memory from $800 to $8FFF will be saved 
as a DOS 3,3 file: memory from $9000 to JtBAFF will be written directly to tracks S20 ih rough 
$22 on the disk, then read in from the first file using the RWTS. The last 4 pages, $B7 thru SB A. 
will be reyd into the text page at $40ti) and then moved to !6B7ffl0. We must also modify the track 
bit map for tracks $20 through S22 so they are not overwritten by any other file you may wish 
to save on the backup Wavy Nuvy disk. 

Now that the deprotcction process has been explained, we are ready to begin the dissection. 

1) The first step is entering the monitor to iiegin the Boot Code Trace. 

CALL 151 

2) Now we must move the boot program from the A'lsk controller card (at JCSfl®) down to RAM 
so we can modify it to read in the first boot stage and return control to us, 

9fi««<C6(W.C6FFM 
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mm- 


LDX *S00 


9002- 


LDA S9000,X 


9005- 


STA S0300,X 


9008- 


I NX 


9009- 


BME S9002 


9S0B- 


JHP $030E 



The Loader 

riexdump 1 uses Ihe RWTS to load seefion 2 of the game direetly from the disk. Tf you 
aie unfaniiliiir wi(h the RWTS it is dcK'uincntcd on pages 94-98 of your DOS manual. 
Hexdump i has four main sections to il. 

Here is an explanation of what it h Joiiig; 

• Section i copies the entire rtiutiiie (ai $90001 duwn to page 3 (3300J because [he rtiutinc 
loads section 2 of Wavy Navy into S90OO 



— the X register js our counter 

— load a byte from meinory location 59008+X 
— store that byte in location S300iX 

— incremeni the X register by 1 

— if X does not equal 0, branch back to $9002 
—jump lo the relocated routiFe at J30£ 



• Section 2 uses the RWTS to read tracks 20-22 into $9000-$B6FF. We will be using 
the iOB (Input Output Block j that DOS normally uses. It is locateri at !tB7F8. The tOB 
contains the inforiruition the RWTS need^ as fur as Track and Sector to read and where 
to put it in memory. 



ructions disconnect DOS so. we can 
DOS area without any problem 

screen 

or a counter to specify how many 
t to read from the disk 
le in the IOB locations 

number of the disk (0 matches 
the low byte of the data buffer 
gh byte of the data buffer 
be loading into (59000) 

track $20 where we wi 1 1 be 

reading ffom sector F and the 

ore Ihe sector in is SB7ED 

r and Y-reglster must contain the 

rder bytes of the IOB respectjvelx 

subroutine lo read a sector 

high order byte of the data buffer 

sector .counter at SB7FF 

IS branch to the next section 
sector until It becomes negative 

(positive) to read next. sector 
ext track 

Cont inue reading ...eanilnuefl on page 26 



9@0E- 


JSR SFE89 


—these two inst 


9011- 


JSR SFE93 


load over the 


9014- 


JSR SFC5.a 


— (ilear the text 


9017- 


LDA «27 


—this is used f 


9019- 


STA SB7FF 


sectors we wan 


90iC- 


LOA KS0@ 


-Store a $00 by 


901E- 


STA IB7EB 


for the volume 


9021- 


STA $a7r0 


anything) and 


9024- 


LDA #$90 


—this is the hi 


9026- 


STA $B7FI 


where we will 


9039- 


LOA (f520 


- this specifies 


902B- 


STA 5B7EC 


reading from 


902E- 


LDA ^$0F 


—we will begin 


9030- 


STA SB7ED 


location to st 


9033- 


LDA ff$B7 


—the accumulate 


9035- 


LDY MES 


high and low o 


9037- 


JSR $B7B5 


-call the RWTS 


903.A- 


INC $B7F] 


— increment the 


903D- 


DEC IB7FF 


—decrement our 


9040- 


BEQ $9040 


— if the counter 


9042- 


DEC SB7ED 


—decrement the 


9045- 


BPL S9033 


— branch i f plus 


9047- 


mC SB7EC 


— increment to n 


904A- 


JMP $032E 


--jump back and 



3) At %FA is a JMP $801 , This is the eitit into 
the next boot sia.ge that loads into S80fi. We will 
change this to jump to S980 1 and at $980 1 we 
will put a routine to turn off the disk drive motor 
this is at $98BI is dial we will t>e reltcaling boot 
1 from $800 to 59800 later. 

96FA:98 N 98»1:AU E8 C» 4(: 59 FF 

4) We are reiidy to execute the boot and when 
the Apple beeps, boot 1 will he in at $800 and 
can be modi Tied, 

96mG 

5) What we have to do now is move boot 1 at 
S800 up 10 S9800 to modify it. If we tnodity 
it .11 $800, it will just be overwritten next lime 
we reboot. Boot 1 occupies only one pape and 
is easy to relocate. 

6) [f you look at $98KC you will see a JMP 
SB829. This is the jump to the next and final 
boot Stage of Wavy Navy. We must change this 
so it junips to the monitor instead. 

988D:59 FF 

7) Once again, we can execute the boot at 
S9600. 

96B»G 

8) Bool 2 is now loaded in. Listing through 
memory, nothing strikes me until I get toward 
the end of page SBE. At SBEDC is a JMP 5S00 
and this is the jump to the start of the game (I'm 
surprised Sirius made this Boot Code so easy 
to trace; it's not like them). All we have to do 
is change the JMP SS00 lo a JMP SFF59 and 
boot 2 will jump to the monitor instead nf 
jumping to the start of the game. 

BEDD:59 FF 

9) Root I at $9800 is still exiting into the 
monitor, so that must be changed back so it will 
Jump to boot 2 at $BB29, 

988D;29 BB 

10) If we were to execute the boot right now 

the. game would load and begin running. 

Why? At $982F is a LDA #$BB which tells 
hoot 1 to load boot 2 at page $BB which is 
$BB00. Even Uioufih we modified boot 2. it will 
get loaded light over. All we have to do is 
chanjie the SBB to a SDB and ii will try to load 
boot 2 in at $DBTO, whith is ROM. and nothing 
will be loaded over. 

983«:DB 

1 1) Now everything is set. When the boot is 
executed, the game will load in and return 
control lo us. 

96mG 

12) Once tiie game is loaded in, we can save 
the first section of the game from $800 to 
$8FFF, However, before we reboot we have 
to move page $8 to a safe place in memory so 
it will not be overwritten when we lebool DOS. 

99e»<8e».8FFM 
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13) You should have 2 blarik initialized disks 
with 110 HELLO program. I will refer lo them 
as disk 1 and disk 2, Insert disk 1 and reboot 
DOS. 

ceeeo -^ . 

141 Now we have Id enlLT Lite iiiunitor again 
and move page !C8 baci; from .S90(W. 

CALL -151 

15) Before we can save the tifst pan of Wavy 
Navy, we have tn patch DOS so we can save 
a file longer than STFFF bytes, then .save the 

file. 

A964tFF 

BSAVE WAVYl.A$8e«,L$88«e 

16) What we have to do next is gei the second 
part of the game in memory. To do this we'll 
have to repeat steps 2 tlirougli 1 1 (come on now, 
it's not that bad) to Boot Code Trace the disk 
again. 

17) When you finish step 1 1 and ihe gurne is 
loaded in, move S9000 through SBAFF down 
lo safe meinoiy like $2000 so ii can be saved, 

2»e»<9«8e.BAFFM 

18) Now Irimxt disk I and reboot DOS, 

C6mG 

11>) Just to be safe, save seciion 2 ot the game. 
That v^ay if the memory gets accidentally 
overwritten, you won't have to do the beloved 
Bool Code Trace again. 

BSAVE WAVY2,A$2»Be,L$2Bflft 

20) Now enter Hexdump 1 at 59000. This is 
the ruullne fur reading the second part of the 
game directly from the disk. Sec the sidebar ff)r 
an explanation and listing to checit your typing 
with. 



Hexdump 1 



9000 


A2 00 BD 00 90 9D 00 03 


9008 


E8 D0 F7 4C 0£ 03 20 89 


9010 


FE 20 93 Ffc 20 56 K A9 


9018 


27 BD FF B7 A9 00 SD EB 


9020 


B7 BD F0 B7 A9 90 SD Fl 


90?8 


B7 A9 20 8D EC B7 A9 0F 


9030 


3D ED 67 A9 B7 A0 ES 20 


9038 


B5 B7 EE Fl B7 C£ FF B7 


9040 


F0 0B CE ED B7 10 EC EE 


9048 


EC B7 4C 2E 03 A9 04 8D 


9050 


Fl B7 8D FF B7 CE ED B7 


9058 


A9 B7 A0 E8 20 Bs B7 EE 


9060 


Fl B7 CE ED B7 CE FF B7 


9068 


D0 EE A2 00 BD 00 04 9D 


9070 


00 B7 BD 00 05 9D 00 BS 


9078 


BD 00 06 9D 00 fi9 BD 90 


9080 


07 9D 00 flA ES m E5 4C 


9088 


00 0S 



21 ) When you finish entering it .save it lo disk. 
BSAVE HEXDUMin,AS9e»B,LS8A 



22) Now wcMl modify thi."! routine to write 
( instead of reading) the .second .section of the 
program to tracks $20 through S22. 

*«»18:2B \ %lx2» N %iD-M N B7F4;ft2 



23) Now insert disk ? and execute the routine - 



24) Once this is done, run your sector editor 
and readTn-ickSl I Seetor.S0 of disk 2. At byte 
$B8 you should see the following: 



FF FF ■ 



FF FF 



FF FF 



Enter 10 consecutive S00 bytes here to cover 
up the $FF bytes and then rewrite the sector. 
This blocks oiit tracks S20 through $22 so they 
"i^ ill not be used by any other file written to disk 
2 fsee DOS manual, page 133). 

25) We art; now entering the home stretch and 
the final step is transferring the main program 
to disk 2 along with the loader program First 
we want to insert disk 1 and load section 1 of 
the game and Hexdujup 1. 

BLOAD WAVVl 
BLOAD HEXDUMFl 



26) .Now all we have to do is put a jump to our 
$9000 routine at $7FD, patch DO.S to save a 
139 sector file, and save the program lo disk 
2 (Remember to insert disk 2). Disk 1 will no 
longer be needed. 

71''U:4C m 99 

A%4:FF 

BSAVE WAVY NAVV,AS7FD,L$889fl 

If you wish to make a baek-up of your 
unprotected version, your best bet is to copy 
the whole disk. Oihcrwi.sc. it would involve 
copying the file, copying tracks S20 through 
S22. and modifying the track bit map for those 
tracks again. 

A neat trick: Partway into the tlrst level, 
press Reset a few times very quickly. This 
should leave you In Applesoft. Then type 
CALL 2053 to run the game again. Your boat 
should be out of sync with the waves and you 
can hide underwater ro avoid being hit. Also 
if you wish to play a game with unlimited ships, 
make the following modifications: 

RI-OAn WAVY NAVY 
0A96;9(( N 66W;ft0 N 6B10:»0 
lEfi4:EA EA N IE97:EA EA 

Then type 7FDG to siait die game. Have fun 
but don't get seasick! ! 







The Loader (continued) 


• Section 3 is basically the same as Section 2. The RWTS is used to read the last 4 | 


pages 


of part 2 of Wavy Navy into the text page bufler at 5400 because we ran out of memory 1 


al $B7M. 




904D- 


LDA nu 


—specify to read into page 4 whieb is the te^tt 


904F- 


STA $B7Fi 


page buffer 


9052- 


STA JE7FF 


—the 4 also specifies how many sectors to read 


9055- 


DEC JB7ED 


—decrement the sector counter to ttie next sector 


9058- 


LDA »$B7 


—as explained earlier the accurrulatof and 


905A- 


LDY OSES 


y register must tontain the address of the lOB 


905C- 


JSR $B7B5 


—once again, execute the RWTS routine 


906F 


INC iB7Fl 


-increment the page nurrUer of the ttaia buffer 


9062- 


DEC SB7ED 


— liecrement the sector number 


9065- 


DEC IB7FF 


—decrement the sector counter until it reaches 


9068- 


BNE $9058 


— if not yet 0, continue to read 


Now that the RWTS is no longer needed, we can move the memory that occupies the 


text ps 


ge (at %4m) to 


SB7M where it belongs and finally, jump to the start of the g;tme at .$8W 


906A- 


LDA M30 


— load the X register with 


906C- 


LDA $0400, X 


— load a byte from memory location S0400+X anfl 


906F- 


STA SB700,)( 


store it in location iB700+X 


9072 


LDA S0500,X 


-tilts works the same way as the last two 


9075- 


STA SB800,X 


instructions except ft moves page S05 to 5B8 


9078- 


LDA $0600, X 




907B- 


STA SB900,X 




907F- 


LDA S0700,X 




9081- 


STA $BA08,X 




9034- 


IMX 


— increment the X register 


9085- 


BNE S905C 


-If X does rol equal branch back to S906C 


9037- 


JMP J9300 


—memory move complete Jump to start ot game 
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softkey for. 



Kindercomp 



by B. Croome 



Spinnaker Software Carp. 

215 First Sim-l 
Cambridge. MA &2142 



Requirements'. 

48K Apple I! 
A blank disk 
Super lOB i.5 



Kindercomp is a "collection of six learning 
gnmes" only two of which, "MATCH'" ;uid 
"SEQUKNCK", fiavc any real merit as they 
arc interactive learning,..;) third is a hard (for 
an child) drawing program and the others are 
just pretty graphics. 

[ was asked by a friend of mine to attempt 
to deprntiici thi^; disk as he could not make back- 
tip.i ul it for his children to u.sc. Despite the fact 
that Spinnaker cautions the user,,. a child, yet, 
til "not told the disk or touch the exposed part 
of the disk" and despite the fact that this 
program was actually designed for children, the 
disk was protected. . .downright silly! 

On to the deprotection. On booting the disk 
the Applesoft prompt "J" was seen so I fclt wc 
shmild have a nearnormal DOS in action. The 
boot seemed normal with no funny skips or half- 
tracks so I assumed it used normal tracks. I 
booted It again and this time wheti 1 got the tide 
page 1 hit Control Reset and was iuimediatel)' 
dropped into an App!csott prompt. 

I attempcd to CATALOG the disk and wa.s 
successful in receiving y lull catalog with 
Applesoft and Binary files. Those of you 
fauiiliur with Beagle Bros' Apple Meehame will 
reeogni/.e their fdes along with several othf^rs. 
I then attempted to LIST the program in 
memory.., it was still there and intact. I 
attempted to LOAD another Applesoft file and 
that worked fine too, I then attempted to SAVE 
thtf file ill [iieUHJiy... nothing! This eonllrmed 
that the DOS and RWT.S. while sitnilar enough 
to Applesoft to run a standajd Beagle Bovs 
program, had also been modi lied somewhat. 



The program MENU will Eict just fine as. the 
Hello program. 

Using the Nibble Editor from Copy II Plus, 
I examined die various tracks and sectors on 
the disk and determined that tracks U) 2 had 
had the epilog byte changed I'loni nonnal and 
tracks 3 on had the ,'kddrcss prologs changed 
from D5 A A % to B7 A A % (track 7 was just 
a bit wcirdi. 

Since everything seemed normal except the 
DOS, Super [OB was the perfect candidate for 
the job. The controller below will copy tracks 
S3 -$22, skipping track?. Poof... adcprotcctcd 
disk! 

Step by Step 

1) Formal a blank disk with a normal DOS. Use 
"MENU'" as the "hello"' filename. 

LNlf MENU 

2) Use the Super lOB eonlroller (installed m 
Super tOB 1 .5) below to copy from the original 
Kindercomp disk to the blank disk. 

3) You're done! Hide the original disk. 



controller 



1000 REM KINDERCOMP 

1010 TK = 3 ,LT= 7 :ST= 15 -LS=15 .CD = WR 

;FAST = 1 
!0?0 RESTORE : GOSUB 190 60SUB 490 . QOSUB 

610 
1030 GOSUB 230 : G0SU8 490 : GOSUB 610 : IF Lf 

= 7THENLT=35 
1035 IFPEEK(TRK) = LT THEN 1050 
1040 TK= PEEK (IRK) + (TK=3 ) :ST = PEEK 

(SCT ) . GOTO 1026 
1050 HOME PRINT "COPYDONE" END 
5000 DATA 1 S3 .170 ,150 



ci}ntrnl1er checksums 



1000 - V^SSB 1035 - J74FB 

1010 - $D424 1040 - J4DF0 

1020 ■ $9D0A 1050 $ei4B 

1030 - S268F 5000 - 17578 



% 
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an update for... 



Flight Simulator 



by Eric Sunshine 



Ii is likely that changes have be«n made to 
the code residing at $A7E0-SB2DF in some 
versions of Flight Simulator JL by SubLOGlC. 
As such, step 7 of my softkcy (COMPUTIST 
No. 36) must be modified so as to capture the 
"language card data" from these altered 
versions. Although 1 am unable lo supply the 
"exact" modifications, I can present helpful 
information, and "land marks", of sons, which 
may aid in overcoming this obstacle. 

Begin by examining the code at $ ID00 after 
coiripleiing step 6 of the softkey. 



1000- 
ID03- 
1DB5- 
1D0S- 
1D0B- 
1O0D- 
1D0F- 
1012- 
IDU- 
1017- 
1019- 
lOiC- 
lOlE- 
1021- 
1D24- 
1026- 
10J9- 
102B- 
102D- 



STX SlEfiS 

LDA »%m 

STA $lEa0 

JSR $1EC4 

BCS ni530 

LOA N$E0 

STA $lEe3 

LDA #$A7 

STA JlEe4 

LDA mz 

STA $1E01 

LDA ttm 

STA UB2 

JSR $1EA0 

BCS I1D30 

LOA SlEai 

CMP #$25 

Bcc %im 

JMP $A7£2 



Store SLOT * 15 



Load DOS 

Error, go to error handler 

Store $A7E0 as destination 
address for upcomirig read 

Start at Quarter $22 



Read 

Error, go to error handler 

Done with read? 

No, continue reading 

Yes, jump to "main boot" 



Look for the jump to the "main boot". On 
the version for which the softkcy was written, 
the code at $A7E2 disassembles to reveal a 
jump 10 location SAA4D, 



A7E2- 4C 4D AA 
A7E5- 4C 40 AA 



JMP IAA4D 
JMP JAA4D 



reveals a series of subroutine calls and error 
checks, 

AA4D- NOP 

AA4E- LDX mf 

AA50- TXS 

AA51- JSR S1EC4 Load DOS 

AA54- BCS $AA70 Error 

AA5E- JSR SAAA5 

AA59- BCS SAA70 

AA5B- JSR $ABB5 

AA5E- BCS $AA70 

AA60- JSR SAC9B Check tor 

AA63- BCS JAA70 Error, go 

AA65- JSR tA71C 

AAfiS- BCS JAA70 

AA6A- JSR $AD2B 

AA6D- JMP JAA76 

Di.sas.^emhle the code li.sted for each JSR. 
Note the call which references the language 
card. On the .softkey ed version, this was found 
in the subroutine at $AC9B. 



go to error Inandier 



& load RAM Card 
to error handler 



AC9B- 

AC9E- 
ACAl- 

ACA3- 
ACA5- 
ACA9- 
ACAB- 
ACAC- 
ACAE- 
ACB0- 
ACe3- 

Aces- 

ACBB- 
ACBA- 
ACBD- 
ACC0- 
ACC2- 
ACC5- 
ACC7- 
ACC9- 
ACCB- 
ACCE- 
ACCF- 



LDA sceas 

LDA SC083 

LDX am 

STX $0000 
CPX $D000 

BNE JAD2A 
DEX 

BNE JACA3 
LDA #$00 
STA $1E03 
LDA #$00 
STA $1E04 
LDA #100 
STA $1E01 
JSR tlEB3 
BCS $ACCF 
LDA $iE01 
CMP #$22 
BCC $ACBD 
LDA #$01 
STA $08B2 
CLC 
RTS 



Read/write enable RAM card 



Is RAM card present? 

Mo 



Yes. ACAEG in STEP 7 
forces RAM card load 
STEP 7 changes this to a 
t4i3 so It loads at S4000 

Start with track 1 

Read "language card data" 



Done reading? 

No, read inore 

Yes, indicate RAM card 

presence 



The second, identical JMP, is part of the 
RESET handler. Next, disassemble the code to 
which this jump is made. The soflkcyed version 



Notice the two locations referenced by step 
7 of the softkey. If in fact, the code has been 
moved and/or altered, the memory locations 
will change. The $4fl must replace the $D0 in 



the subroutine. Likewise, the routine must be 
activated from the correct spot so as to force 
load the RAM card. Replace the ACAEG with 
the appropriate address. 

Step 16 of the softkey may also need 
alteration. Search the disk for a sequence of 
bytes which refer to the language card, fhe 
hytes AD H^! CO AD 8.1 Cfl A2 M should be 
found ordy once. On the version from which 
the softkey wa.'; written, these bytes were found 
tm Track $09, Sector JOC. The code which 
checks for and loads the RAM card, must be 
modified so that it calls the RAM card load 
routine only once. This was accomplished on 
the softkeycd version by replacing bytes SE2 
through ffER of Track W9, Sector .fOC with the 
NOP instruction. 



AC9B- 
AC9E- 
ACAl- 
ACA3- 
ACA6- 
ACA9- 
ACAB- 
ACAC- 
ACAE- 
ACB0- 
ACB3- 
ACB5- 
ACB3- 
ACBA- 
ACBD- 
ACC0- 
AeC2- 
ACC3- 
ACC4- 
ACC5- 
ACC6- 
ACC7- 
ACC8- 
ACC9- 
ACCB- 
ACCE- 
ACCF- 



AD 83 CO 
AO 83 C0 
A2 00 

BE 00 D0 

EC m m 
m 7F 

CA 

D0 F5 
A9 00 
80 03 IE 
A9 00 
80 04 IE 
AS 00 
80 01 
20 B3 



IE 
IE 



EA 

EA 

EA 

EA 

EA 

EA 

EA 

A9 01 

80 E2 08 

IB 

60 



LDA $C083 
LDA $C083 
LDX #$00 
STA JD000 
CPX SD000 
BNE SAD2A 
DEX 

BNE SACA3 
LDA #100 
STA $1E03 
LDA #SD0 
STA SIE04 

LDA sm 

STA J1E01 
JSR $IEe3 

BCS $ACCF 

NOP 

NOP 

NOP 

NOP 

NOP 

NOP 

NOP 

LDA «}01 

STA $0aB2 

CLC 

RTS 



Replace the appropriate bytes with SEA in 
the sector in whicli the code is located 
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The Product Monitor 



Credits/Intro 



by Jeff Hurlburt 



A department is bom. In recognition of 
the furious product development activity 
whict> lias swept the Apple world of late, 
COMPUTIST has opted for more frequent, 
fresiher perusals of just what's in store for 
you and your computer. So, sit back and and 
enjoy. 



Ratings 










***** 


Superb 


**** 


Rxcellent 


*** 


Very Good 


** 


Good 


* 


Fair 


m 


Poor 


(i)® 


Bad 


u 


Defective 



Apple //gs Technical Reference (Book)z 



By: Michael Fischer 
Price'. .$19,9.'v 



Publisher; McGraw-HUl 
Rijting: *** 



A few months ago 1 had the pleastire of reviewing Fischer's 
book on programming the 65816 and so was very interested in 
his latest //gs effort. '"Teehnical Reference", to begin with, is 
somewhat misleading True, there is plenty of specific technical 
information, but also some important gaps which should be noted 
at the outset. Except for slot and connector pin-outs you will 
find nothing specific relating to hardware (no chip data. 
sctieiiiaiics, or timing diagrams). Though sonre uttempt is made 
at a system overview, the section is too sketchy to be of n:iuch 
value; and, finally, if you want an in-depth exposition of the 
//gs monitor (e.g. an annotated listing), yon will have to look 
elsewhere. 

Essentially a system firmware reference, the McGraw-Hill 
text leads off with good coverage of memory allocation and soft 
switches, lists monitor entry points (addresses and routine 
names), and provides some assembly language examples for 
managing Battery RAM and modifying Control Panel settings. 
Very litde is said about the mini-assembler: bu: monitor 
commands are listed and described. 

Unquestionably, the book's greatest strength shows in 
discussions of text and graphics displays, and the large sections 
dealing with Quickdraw and the Desktop Bus twindows, dialogue 
boxes, "controls", ...). Probably, the coverage given either of 
the latter two areas is worth the book's price. Other topics 
receiving decent treatment include the Sound Manager, ProDOS 
16, disk I/O, die Event Manager, Desk Accessories, interrupts, 
and the "Standard Apple Numerics Hnviromnent' . 

In case some of the above sounds like Greek, be assured that 
you arc not alone. Fortunately, you have the audior's 
conversational .style, program examples, and copious Chans, 
tables, and other aids. All go a long way towards making tilings 
clear. The //gs, chiefly due to its considerable resident firmware, 
is not a simple machine. Fischer's Apple //gs Technical Reference 
is both an excellent way to get started and a valuable long-term 
resource. 



SpinDizzy 



Publisher: Electric Dreams, from Activision Price: $34.95 
Requires: 64K Apple ][ series, joystick Rating: ill 

Among the more difficult of hi-res animation tasks is the real- 
time movement of some familiar object (like a marble or top) 
along a simulated 3-D surface. Everyone knows how such an 
object is supposed to both look and sound; any slip-ups totally 
ruin the effect. 

Undaunted by such concerns, the Electric Dreams group ha.5 
produced Spiiuiiny. a 3-D maze- running contest. Ostensibly, 
yuLi and /or another player are engaged to map a strange new 
world repleat with ramps, lifts, trampolines, water hazards, and 
gaping chasms. Your mapping device is a stick -control led 
"robot" shaped like a gyroscope (optionally, a marble or top: 
shape lias no effect on play). 

Tlie race is against a countdown luiicr, not each other, so there 
is a single score expressed in % of the maj:e mapped and % 
of available "energy-boosting" (time adding) jewels collecfed. 
Falling into a hazard subtracts from player time and, in a two- 
player game, transfers control. Selecting the single player, slow 
speed variation, a beginner can expect five or ten minutes of 
action before the countdown reaches zero. Restart, happily, 
occurs without delay. 

While the option to view a rough, low-res map of the maze 
is helpful, the fact that screens are switched instead of scrolled 
makes it difficult to plan exits, costing frequent, game-delaying 
drops off the surface. Even worse, maze sections are arranged 
so that cardinal points face screen corners, (i.e. stick UP moves 
your robot towards the upper right comer!) All of wMch might 
he forgiven if ilie controls were moderately responsive, instead 
of feeling like a bowl of jello. 

A game beset by low production values, Spindizzy displays, 
at best, circa '82 graphics technique and virtually nothing in 
the way of sound. Add this one to your "avoid-if-I-can" list. 



Updates Etc. 



Tass Times in Tonetown 
(which was very favorably 
reviewed) is available in super 
hi-res for the //gs. The 3.5" 
mini-disk (256K required) 
version sells for $44,95 A 
great showpiece for the //gs. 
the game rates a solid * * * * 

hi the COMPUTtST No. 4tZI 
(favorable) review of War Or 
Pieie? You Decide! there was 
an error m the Bright Ideas 
ordering address. The 
corrected information appeal s 
with this month's vendors. 



Vendors 



Activision 

POB 7287 

Mountainview, CA 94039 

(800) 227-9759 

In Calilorma: (415) 940-6044 

Bright I dens 

52 Eseter Street 

Portland, ME 04102 

(207) 777-1330 

McGraw-Hill 

2600 Tenth Street 

Berkeley, CA 94710 

(415) 548-2805 
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The Book 
Of 8oftkeys 

Legends tell of the days when the ancient 
back issues of Hardcore COMPUTIST 
were readily available to anyone who 
wished to purchase them. Those days may 
be long since past, but the information 
contained in these ancient documents has 
been diligently transcribed to the pages of 
a modern reference work: 

The Book of Softkeys 

Volume I: $7.95 
Volume U: $12.95 
Volume ni: $17.95 



Because of the demand for the 
information contained in those rare 
issues of Hardcore COMPUTIST, we 
went deep into the archives to come up 
with a collection of softkeys originally 
contained in issues 1 through 15: 

The Book of Softkeys 

We compiled them into books which 
contain all the softkeys and some of the 
more choice articles from these out-of- 
print issues. 

Each book is over 150 pages long, 
brimming with deprotection information 
and makes a economical alternative to 
those rare (and largely unavailable) back 
issues of Hardcore COMPUTIST. 

Come, discover five issues of 
COMPUTIST history in each book. 

Use the enclosed order form 
to get yours today! 



Softkeys covered ia each volume 
Volume 1: Issues 1-5 

i:{iitlaiu> Honkej:!* Fur: AkaJubusti I Anipcrm^ic I A^c; Gajaxian i Azck I 
Ba£ of Tritiki | Bill Budgt\ Trilogy j Bunard Bait | Cannonb^ll yiiti | 
Caiiinu I Ddlu Reporter | DeaiJllnE | Disk Org^anizer n | Eghi^ \l 
CcmmunLCatiortt Dtsi; | Hard HatMacV | HoiFHf AcLtjyntajil | HonMWiMd I 
Lancaster | ^f,ag[c Wiminw M | Muld-thak C^ulrif | Vliilriplnn { Fc^st 
Fatrc^ I Prtsoiier U I' Saauin^ LigiitfooL | SgiWd Wj-iicr TT I Snuaiicra I Spy's 
Dccnis? I $mr?ross | Suspended : Uliima l\ \ Vbifilc | Visiplot | Vtsitrcnd | 
Witness I Wiiafdry | Ztrrlt I i ^rlt II I Z\ii\ HI | PLUS Iimw-Ut articles 
aiKlpFngram lisitnas i:>f neerf-trt-hjivp prnsrams uwd lo mate unprotected 
backups. 

Volume U: Issues 6-10 

Quntairu AAftkc.ys for: Apple Cklcr Spidiir | Apple Logo | Ajtadc Mfurhinc | 
Till? ArtiEi I Bunk Street Writer . CannonbaJl Bliti ;i Canyon Climber j 
Covvnjii of Frcitag | Crash, CmmbEc & Chcrnip | Data Fattor^ 5.© | DB 
MaKtcT I Tlw Dlt*(ion*ai>- I Bi^nliat Data Duplicaicrr 1 ^i^ HI I Gold Ruf^ I 
Krrl] Lojio | LfijJiacy of Llylaantyn | Waiik Ol Ihe Sun I Minil Man I 
Mou£kJlt&ck I Mu^EC Constntfrtion £et | Oil\ Well | Pand(>ra\ ^x j 
R^^lvMrun ] Simmy Li^tfwt I Screcnwritei H '/1.2 I Sensible Spellet 4,0. 
4i.0c. 4.1c \ iIk Spy SirfJtes Back | TSme /one v| l | Visible Compiler; 
&502 I Vi&idCA i Vistteiiii \ 'lMji,\\m I Ha^iJcn SuAwariJ | Sierra Online 
Snifiwarc ] PLUS the complete listing of the ultimalc cracking 

Volume EQ: Lssucs 11-15 

ciinldinA^tFtli^yTifAriAlicn Addilitin I Alien Munchie^ | Alligjlor Mi^.| 

Ctfliipuicr Prupai-jtitjn SAT 1 Cut And Paste I Dcmclitiun DiviEJon I t>Utd 
CDcvclopcnvjnt Lfarning Materia3s> sofiwarc j EA (Electronic Ajtt) 
tH]ftw;in: I Einstein Compiler versian 5.3 .< Hscope Prnm Rtingisutn [ 
FittaiciaJ Coolibmli | Flip Out | Hi-Kcs L'pirputtr Oolfll : Knaware | UT. ' 
Pai I LastGtfldiflior i Learning Wtih Leepcr | \M\n'y, .Shar^ . MasierType 
v\.l \ Mathc Magic I Minus Mission I Milli^naii^e i MMtc ConsinlcHon 
Set I One On One | PFS softwore i PS < Penguin) Software ] TIic Qlikt | 
Rfcky's Socks I Sabocagjc I Scsdra^oD I Sciisibtc Spetiei JV I Snouptir 
Troop.'i 11 I KoftPrtrn Advennitc | Siitikybcar scncs | Suicide | TdlSlar | 
Tic Tac Show : Ti][ic Is Mt»t[ti>' I TmJisytvania I Type Atlack I Ullinu m 
Exodus I Zocm Graphica | Breakins Locksniilli i.fl Fait Ctjpy I PLUS 
Feature sHltles uit I Csavci I TIk Cure Disk Searcher i Modified ROMs.. 



To order: The Book of Softkeys 

D Volume I - $7.95 -I- $2 shipping/handling 
g Volume II - $12.95 + $2 shippins/handling 

U Volume III - $17.95 + $2 shipping/handling 

n All three volumes!! 

$30.00 + $2 ship/handling 



Name. 



Address . 
City _ 



State 



Zip 



Country 



Phone 



_Exp. 



Signature ^rp« 

Foreign orders (except Canada and Mexico) please add S5 for shipping and 
haiidTitig. Waiiiiiiigtun reyidents odd 7,8% sales tax. 
Most orders arc shipped within 5 working days, however, please allow 4-6 
wi^ks delivery, US Funds drawn on US banks only. 

Send to: Book of Snftkevs PO Box 110S46-T Tacuma, WA 98411 

««*) 474-5750 



the COMPUTIST shopper... 



Books 



I 



f-jftH'iUinaiif Sy.vtp'iiL'i 

Mlcroral for Wordstar Si 2 00 

Mlprorpt tnr Suporcalc .S12.00 

MlcroreJ for Vi$ica]c ;Jl£.00 



Software 



Typing Tutor + Word InvMere tjle) J16 00 



Dambuslars , S24.5n 

Hardball I?4fiO 

Hstit Nishi S2*-50 

Law/ ot ihe West .$?4.50 

Smarl Eyes , S4B.OT 

Tfie HouBii - ssa.m 

ITiB Falluwiihip ol [ha Ring S3ZM 

Actimkirt 

Grseting Cara Maker $3?.Da 

Tfltm PapBi Wiitet Ma.OO 

Writer's Choice .$39 75 

Filof's CliuicG S39,7S 

Planner's Ciioice S39.7S 

Haclter tSa.OO 

Qhoslbustera., S3Z.00 

lass Times In TnnBtnwn... $32.00 

Space Stiuttle: Journsy inta Sp^e.... $32.00 

The Rocky Horror Show Sa7.7S 

SliaDghai $3E.(M 

Littia People Discovery Ktl., $3^.00 

GamHmakar 539.75 

Labyrinlfi ,. S32.00 

BorrowBct Tima 132.00 

Portal $36.00 

Altar Ego (male) $39.75 

Altar Ego (fernalc) $39.7S 

Mlndsharinw .132.00 

Murder on ttie Mississippi $3£.[XI 

Hacker II ,. tsa.OO 

The Qams Show S3e,00 

Tic Tac Show $32.00 

Wiiaid or Words S3a,00 

Ameriam Rducmtftn Ciimpmer 

Spanish ; Sie.OO 

Spaiting $39.7S 

Phonics $39. 7E 

i.earn lo Read $30. 7S 

Reading Comprehenston $39. 7& 

U.S. History $16.00 

U.S. Oeognaptty Jie.oo 

linsri 

M^io VViudon lie IlVt.llU 

Magic Window U tIM.IH) 

Magic Office System $i?6.00 

Msgie Winrtow II entra (ISSK) S1*1.50 

Ashlflfi'iatf 
DBssa II (requires Z80] I'tlE.DC 

Avahn fiiil 

SialiE Pro Baseball S2B.00 

Mission on Thunderhoad. . .$20.00 

Dreadnou^ts £21.00 

Undar Fit^ S47.50 

BtinSum t'leflfmiicjf t^ubUshing 

Card & Party Shop $32.00 

Comie Strip Maker ..., $32.00 

OmiiMIr 

Award Maker Pltfa , $28.50 

Taiffl 7 Oelux M2.00 

Blazing Paddles $21.25 

Prince $3b.2b 

Ted Sear's Rainy D^y Games. $21 50 

Video Vegas,...,.,. ,...«.....,...„ .„S2f .SO 



Apple IkfBCliariid 521.00 

EJaagte Basic utility .$^S.7S 

Double Take $26.76 

Ulility City $21.00 

DOS Boss Utility $17.26 

Silicon Salad $17 so 

Disi<Oyick $21.00 

Triple Duinp $SS.0O 

Fat Cat $ait.75 

O Code i^B.X 

Power Prim S2S.S0 

Extra K SZB.SO 

Pro-Bytef $24.7S 

Big U 524.75 

Macroworks , . $24 75 

Super Macrowurks $35.26 

Cjkbal pTdgrain Liiit E^tOF &3fi.25 

Boaglo Graphics $-12.76 

erame-up $2t.oo 

Shape Mechanic $28.50 

Fonl Mechanic $2i.S0 

Minipis Disk 1 121.50 

Minip« Disk 2 ...$21.50 

Miniplx Disk 3 $2f.E0 

Alpha Plot 525.50 

Beaple Screens . . . . .$25.50 

BeaylB CiirTipilet S53.25 

Beagle Bag $21.00 



&Ft Sysicfm 

Payroll ... $198.00 

Aoeourils Receivaljle $193.00 

Acc04jnia PayaPle . $193.00 

General Aueounling (ProDOS) $196.00 

Payroll (ProDOS) $193.00 

Accounts ReCBlvEibie (ProDOS)... S 193,00 

Accounts Payatile (ProDOSl ...SI 98.00 

Irvenloty Control (ProDOS) S198.00 



Science Tool Kil Master Module... .$55. 50 
Science Toot Kit Module 1- 

Spead and Molion J32.00 

Science Toot Kit Module 2- 

Earthquake Lati $32.00 

Where in the USA is 

Carmnn San Diogo? $35.00 

Where in the WOHLD is 

Carmen San Olego?.. $32.00 

Type $36.00 

On Balance $79.50 

Bank Stteef Writer g4K $55.50 

Bank Street Mailer 64K $55 50 

Bank Street Mailer 128K $SS.50 

Bank Street Filer 64K SS5.50 

Bank Slreel Filar t2aK SS5.50 

BanK Streei Speller SSS.50 

Dazzle Draw S47.50 

The Print Shop 539. /S 

Print Shop Coinpanlon $,^2.00 

Prim Shop Graphics Library Disk 1 ...S20.U0 
Prim Shop Graphics Library Disk -^ $?0.00 
Prinl Shop Graphics Library Disk 3... $20. 00 

Animate :..;...$5S.50 

The Toy Shop $47.50 

Alrheart. $25.00 

Loda Runner $28.00 

cnanrpionstiip Lode Runner $28.oo 

Sreakera .$36.00 

Karateka $23,00 

Captgln GoGdnlghi end the 

Islands ol Fear.. $K,00 



(dumber Farm $24,00 

Create With Garfield $24.00 

Cieate w/Garliald ■ DelUK £32.00 

Teddy Bear-rels of Fun S32.00 

Fish Scales S24.00 

Meteor Multiplication $2/. 00 

Attigalar Miy $27. M 

Decimal Oiscovety $36.75 

Writing AdventutB S37.00 



gPYX 

Temple of Apshal Trilogy $32.00 

Ctiampionship Wrastling $32.00 

Destroyer $32.00 

The Movie Monster Game $32.00 

world Games $3S.00 

Suinrnei Gaines,,: „ ,$32.00 

Summer Games II.. . . ..$3^00 

Winter Games $32.00 

World's Greatest QasePall Came.. £32.00 
Wortd's Greatesl Football Qaiite...S32.O0 

Zork I $32.00 

Wishb ringer .$32.00 

Suspended $39. ?i 

Planetfall $32.00 

Seaslalker $32.00 

A Mind Foreuer Voyaging $36 00 

EnchanlBi $32.00 

Sorcerer $38.00 

Spniltaroakcr ...$39.75 

Trinity $32 00 

Foobiitiky S32.00 

Ballyhoo 532.00 

Hitctihiker's Goide $32.00 

Moon mist ; $^.00 

Starcross. S39.75 

Afrirre'pnL, /nlrrTidttrjrraf 

Wordatat Proleseionai $349.50 

WordStar $S47.00 

Decision in Iho Dosert $32.00 

Crusade In Europe $32.00 

Conflict In Vietnam $32.00 

Qunship $32.00 

F-15 SttiKe Eagle $28.00 

Sulo Flight $28.00 

Silent Service ..$2300 



Hard^vare 



AAA Intenuitlotttu 

5 V* inch Wooden Diskcase 
(Holds 70 5 'M Inch disks) 
3 ^ inch Wotxlen Diskcase 
(Holds 30 3 '/i ineh CIsKa).... 



..„,.t1fl,(ffl 



Ab<iii 
LeKer.Qualily Paratlel Printer (L0.20P) 
132 COL, 18 CPS, with tractor,,., 1296. 50 



Areylit Am, Ittf 
Universal printer stand $17.00 

Amdek 
Amdisk i - 3" disk drive . $274 50 

Videa 300A Ambei inunitoi $183.00 

Tllt/Swiuel for color 300-730 S30.00 

AST R^^farfh-Apiih Divis'mn 
Mijltl I/O (with 

clock, calendar. 2 serial ports)..,, $157. 50 
Mum ira (with clock i calendar),,! (30.50 

Macti III w/Flrg Button (We) $44,00 

Macti II Joystick (f/e) ,.$30. bD 

Mach III w/Fire Bunon (][. 11 + ) $44.00 

Mach II Joystick (11. 11 + ) $36.50 

Compti Cabif 
Apple 1[ 6 ft parallel cable S30.00 

Smartmodem 300 

w/Smartcom I (Wc) $222.00 

Micromodem //e w/Smartoom I... SI 86 00 

Krati Hv^lfms 
Apple Joystick (3 buttons) S42.7S 

Dot Matrix parallel printer (kX.Pi081) 
80 COL. 120 CPS spgeso 

Dol MalriK parallel ptiiiler (KX-P1091) 
60 COL, 160 CPS. $389.25 

Dot Matrix parallel printer (KX-P1592) 

132 COL, 160/36 CPS $627.00 

Dot Matrix parallel/serial piinler (KX-P1595) 
132 COL, 240/51 CPS, 1&Kbulter$72i.2S 

Hdf£t-7 
Color Ennancer We w(Da77le Draw . Ste^.OO 
Color Enhancer Ih wfDazzle Draw.. ..I1 17,00 



Hoiv To Order 



* Circle ypur selection. If total order la less than S200, plaaae arkf $2.00/item shipping 
a handling. {Most orders shipped UPS so please use street address.) 

• Foreign orders please Inquire as to appropriate shipping fees. 

* Wastiington state residents please add 7.e^ sales tay. 

* Domaatic orders nver $200 FA^ shipping. 

• Offer good while supplies last. All products are for Die Apple ][ unle^ oth«rwlse 
specified 

• Send Orders To: 

SoltKey Fubflahlng 

PO BOK 110816-T 

Tar:omn, WA 98411 

(206) 4T4-5750 



Wame_ 



IDiii 



Add rasa _ 
Cily 



Slate 



Zip 



Country , 



Exp,. 



Stgn3iEure_ 



_CP45 
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Mug Disk Both 

S4.75 $9.95 $i:.95 

[Zi □ Ln 

□ □ □ 

□ □ □ 

□ □ □ 

□ □ □ 

□ □ □ 

□ a 

□ □ 

□ □ □ 

□ □ □ 

□ □ □ 

□ □ □ 

□ n □ 

□ □ □ 

□ □ □ 

□ □ □ 

□ □ □ 

□ □ □ 
n tzi [ I 

□ □ □ 

□ □ □ 

□ □ □ 

□ □ □ 

□ □ □ 

□ □ □ 



Ti'7 . 
Core 
1. . . 



D 



□ u □ 

□ □ □ 
n r 

□ L 

u □ 

□ • - 

• □ • 



□ 



Core 1 

Core 3 , 

Computing 3 . . , 

B«rt of Hardcoie Computing i 

Cote Special SlO.DO . . . . 

(All three CORE mog^ines) 



Some dis^ apply to more than one issue and are shown 
as taller boKes. Spooea! "Both" disk & magazine 
combination orders apply tp ons issufi and its corrasponriint] 
disk. 

BooJt Of SohKey titles are insened for reader intormaiion 
rsniy Earjh borsir containa aii ot liia sottireys appenring in 
riia i^^suBR t]aiow tho titia lina. PEaasr; consult ctjfront ^oa'K 
of Stjftiicy arf tar current prices and ordering inlormation. 

-iU- We tiavB a iimlted 9uppiy of ttiese issues. 

* E3aoK tssue Fs no ionger availabie 



COMPIITIST back issues and 
iVbrary disks arc frequentty 
referenced in current issues* 



llack IsiiiiL's aiitl Litiraiv Disli Rtiltis 



• US, Canada and Mexico back issue rate - $4.75 each. 

• All other Foreign back !s.sue rate - $8.75 each. 

• US, Canada, Mexico library disk rate - $9.95 each. 
" All other Foreign library disk rate - $11.94 each. 

• "Both" disk and magazine rates for: 

US, Canada & Mexico - $12.95 each combination. 
All other Foreign - $18.95 each combination. 

Some back issues are no longisr available, but library disks 
can still be purchased for all back issues. 



A library disk is a diskette that contains programs that would normally 
have to be entered by the user. Documentation for each library disk 
can be found in the corresponding issue, 

• Library disks are available for ail issues of COMPUTIST 1 thru 44. 
A description of the softkeys and programs covered in each issue is 
available upon request. Please send your name and add res along with 
a first class postage stamp (US % .22), 

Cmpy& ^mJlX Colkciml 

C ^J KC^S 3 Game S l Congtructing Your Own Joystie^ I CompHlng G ames i CAMF RKnFK^ Ove r 
30 oi ihe lat^:?^ anii bnsr ; Pick QH Thn Pank: AII-tlmH TOP 20 gamss I DestrucKva Parci^s I EAMON | Grsphii^ fJfsglcisn and 
GraFOFlTH Dragon Dungnan ! 

^JCpS^E 2 UtllitCS: Dynamic Menu I Hign f^: Scroll u&m \ GOTO u^i: Repine I im 
Find . OuJch Copy: Copy I , 

^^^^P MC^bi 1 LirfLpIllCS '. ^^$rnorv M^ | T&xl. Graphics: Merc^u&d .' Bone& [ Jac]C]ed ^cmller | Lcm 
n&fl: Color Character Chart Hjqh Res^ Screen Crunchar I The UFO Factory | Color j Vector GrsphtCsiiShlmmiGring Shapes J 
A Shape Table lyiinb-pcllior j Biopk Grflphina: Arr.Hrie Quallry dirnphfecg, for BASIC Pfogrflmmers | AnimHlJon | ...I^. 

HAVuCOVG vOtnpUllllQ 3 Hypt^rDQS Cr^alCir I Menu Hdb | Zyphyr War^l VeotOf QmpHcfi ] 

Review of Bit Cupiera | Buot CoQe Trauiny *aflkHy 10B ', Ifslerviaw wilfi 'Mike' Markkulal 



n Please send the back issues indicated: 



D Please send the following library disks: 



Name. 



_1D#_ 



Address 

City 

Country . 



State 



Zip. 



. Phone . 



fivip- 



Signature- 



_CP.t6 



US funds drawn on US banks 



Senct check or money order {o: 

COMPUTIST 

PO Box 1t0846-T 

Taeoma, WA 9S4t1. 

(206) 474-5750 

Most orders are shipped within 5 working days, however please aliow 
up lo 4 weeks delivery [o( some orders. Most orders shipped UPS, 
so please use streel address Offer good while supply lasts in 
Washington state, add 7.8% sales tax. 



Back 9»»ucd 

US/Cwuuk/JttewM - W.75 en ftxagu - *K.75 ea 



_ ^fikeys I Arcade Boot Cmsp | Goonies 
Zurri) i Coveted Mirror I Crimson Crown 
CotnpubriiJge | Fleet System 3 | Microwave | Escape 
Catalyst .10 | Number Farm | Alnhaiiei Circus I Joe 
Theisman's Pro Football | mA Cauldron | 
IntL'matinnal Gran PrJs | Fealms \ Making DOSless 
Utilities i Pixit Printer Drivers , Core \ Review of Z- 
RAM Memory Espansinr Board | Reading Tlie 
JoysTOk I ....'. 

43 Sofikeyai Graphics Expander ! 
Information Master I Certificate Maker | Elite | Catalyst 
2.0 and .t.O ! Murder On The Mississippi | Temple Of 
Apsltai Trilogy I TrallAssocial&s programs 1 SpeU It 
Regatta | Coex Training prOj>rams ' Think Fast 
Fmum I How to W rite-Protect vour Slot Zero 
Capturing Locksmith 6.0 Fa.il Copv'l Revisiting DOS 
to ProD()S and Back | Core \ Cuinputer Eyes / 2: a 
Review i APTs 1 Sword oiKadash & Rescue Raiders 1 
L'ltiLiaker [V | 



Sy/(AfVJ I Liehi Simulator | Readen' 

Mk^ys I Bcach-Heail i Montv Plays ferahhle I Racter | 
Winnie tde Pooh j Infocotn Stuff. Kabul Spy, Prisoner 
H I Wizardry \ &■ 2\ Lucifer's Kealm f Tlie PFS 
Series! Dollars and Sense I Strip Poker | Coveied 
Mirror | Wizard's Crown | The Swordthrast Scries 
Axis Assassin | Manuscript Manager I The Crown o, 
Arthain 1 Address Book I Decimals 3.0j Dragnnfire 
Fmurci i Auto Duel Editor | Wizard's Crown Editor 
Questroii Mapper | Qirc \ The Canes of l%6 m 
Review | Adveniure Tips \ Ultima IV 1 

4; JL Sdflk'vs I The Periodic Table I Gemstonc 
WarriorTlnfcrao | Pmgm \ Rmkrs' Sojikeys . Story 
Maker I Adventure writer ! Mummy's Curse j 
Zawton I The Quest ] Pitfall 11 | H.H.R.Q, | FiVtim-i \ 
A Two- Drive Patch for Winter Gaines I Customizing 
the Speed of a Duodisk | Roll the Presses Pan Two: 
Prinishop Printer Drivers | The Games of 1986 | .... 



,m. -^^ Sojikevs \ Adventure Writer \ Mychess II 
Raster Blaster | R^Miers ' Sojikys \ Cranston Manor | 
OlBstbustefs I Designer's Pencil E-Z Learner , Tlie 
American Challenge 1 Crime Wave | Encj'clopedia 
Britannica l^ostams | Fmum \ Taldng the Wiz out ot 
Wi7;irdr\' I Adding a Printer Cart) Driver to Newsroom | 
Cm \ The Games of \m \ 

SoOteys \ MIDI/8 Plus | Homeword v2. 1 [ 

Borrowed Tunc 1 (toazon t Speed Reader ][ | Readen 
Sofike\'s 1 Discovery! | M-ss-ng l.-nks series Donald 
Ducks's Playground | Masterin" the SAT Copv ][ Plus 
4.4C I Master of the Lamps 1 One uii One [ Bridge 
Baron | A.F.. [ Great American Cross-Coumiy Road 
Race 1 Computer Preparation for the SAT | Caslle 
Wolfcnstein j Luscher Profile | Skyfnx | Silent Service j 
Echo Plus I Swashbuckler ! Randanm | Features \ 
Electronic Disk Drive Svi-apper I Abusing the 
Epilogues I Print Shop Companion's Driver Game | 
Care ' Kevooard Repair J Fixing the Applesoft Sample 
Disk [ Hm I Carmen .Sanriiego 1 



Sofikeys \ Under Fite | Pegasus )1 | Take 
I (revisited) | Fligfil Simulator II vl,05 (pan 2) 
Readm' Sofikeyi^l ^m Slate | Alter Ego | 
Rendezvous Quicken | Story Tree | Assemhiv 
Language Tutor 1 Aval cm fliU games Dark Crj'stai 
Fmiires \ Playing KarMeka on a Ik \ Track Finder 
Sylk to Dif tore i Breaking In: tins for beginners ] 
Copv H Plus 6.0: a review [Tlie DOS Altcrer 1 .... 



Sofikfys I Flight Simulator a v 1 .05 
AuloDuel I Rmim' Sofikef!: \ Critical Reading 
Troll's Talc I Robot War General Manager 
Plasmania | Telariura Software 1 Kidwriervl.n | Color 
Me I Features \ ScreenWritcr meets Flashcard I The 
Bus Monitor | Mousepaint for non-Amies ) Core \ The 
Bard's Dressing Room | Advanced Ptayin!> Fechmqm \ 
Championship Lode Runner | 



Safikeysl Hi-res Cribbage j Olympic 

Decatlilon | Revisiting F-15 Strike Hagie | Masquerade | 
The Hobbit | Readers' So{ih!y.<; \Jooya.n ! The Perfect 
Score 1 Alice m Woiiderland | the Money Manager | 
Good Thinking | Rescue Raiders ', Feature \ Putting a 
New F8 nn Vour Languaac Card | Core Exploring 
ProDOS by instiling a CPS Clock Driver | 



3^fc Sofikevsl Crisis Mountain I Terripiii 
Logo I Apple Logo n I Fbhie.s l.O' ] SpellWorks | 
Oumhall I Readers Sofikey's \ Resi-ue at Rigel | Crazey 
Mazey I Coiinn i Perrj' Mason: The Case of the 
Mandarin Murder | Kornnis Rift | Fealitre | More ROM 
Running | Core \ Infocom Revealed 1 



Sojikeys I Word Juggler | TinkI Toi4! I 
Simtloa v2.0 G.I. Jne & Lucas Film's Eidolon \ 
Summer Games II | Thief | Instant Pascal | World's 
Greatest Football Game | Readm' Snftkevx i Graphic 
Adventure #1 I Sensible Grarauiar & Extended 
Bookends | ChipwiLs ; Hardball I King's Quest II | The 
World's Greatest Baseball Game I Femure I How Lo be 
the Sound Master i Core \ The Mapping ot Ultima IV | 



m,^ — Sofikeys | Revisiting Music Construciinn 
Set I Cubit I Baudvdle Software] Hartley Software | 
Bridge 1 Eaflv Games for Young Children | Tawala's 
Last' Redoubt | Render:;' SMeys \ Print Shop 
Companion | Krackina Vol II | Moebiu.? | Mouse 
Budget, Mouse Word" &. Mouse Desk | Advenwre 
Construction Set | Feature I Usina Data Disks With 
Microiines 1 Core \ Super lOB yf.5 a Reprint | ..... 

3 1 Safikeyn [ Trivia Fever ' The Original 
Boston Conrauter ' Diei | Lifesaver | Synergistic 
Software | fflazing Paddles 1 Zafdax | Readers 
Sofikeys \ Time Zone | Tycoon I Earthly Delights 
Jingk' Disk I Crystal Caverns | Karate Champ 
Feamre] A Lilde Help With The Bard's Tale | Core 
Black Bojc | Unrestrieted Ampersand | 



-V-'^O Sajikevs I Millionaire 1 SSI's RDOS [ 
Fantavision | Sot vs. Spy | Dragonworld | Readers 
Sofikeys I King s (Juest f Mastering the SAT | Easy as 
ABC . Space ihutUe | The Fadoiy | Visidex l.lE 
Sherlock Holmes . The Bards Tale Feature ! 
Incneasing Your Disk Capacitj' \Core j Ultimaker IV, 
an Ultima IV Character hditor [ 



Sojikeys \ Threshold | Cbeckep v2.l | 

Micrwype | Gen. & Organic Chemistry Series I Uptown 
Trivia i Murder by the Dozen I Readers' Mhys ' 
Windham's Ckssics | fianer IJp | Evelyn Wood's 
Dvnamic Reader I Jennv of the Prairie | Learn About 
Sounds in Reading | Wmter Games : feature \ 
Customizing the Monitor by Adding 65Cfl2 
Disassemblv I Corel The Animator | 



Sofikeys \ Cyclod I Alternate Reaitj' | 
Boulder Dash 1 & 11] Hard Hat Mack (Revisited) | The 
Other Side ; Readers' Sofike^'s \ F-15 Strike Eagle 
Championship Lode Runner Gatp V 1.3 1 1, Daniiano I 
Wilderness | Golf's Best | Features \ The 
Hnhaneeil.'Uneiihanced //e ! Looking into Fliaht 
Simulator's DOS ] Cure I Appevarex | Installing a RAM 
disk into DOS 3.3 \ 



Sofikevs I Ultima IV ! Robot Odyssey I 

Rendezvous | WordAttaek & Classmate | Three from 
Mindscapc | Alphabetic Kcvboarding | Hacker | Disk 
Director! Lode Runner }iflDI/4j Readers' Sofikeys \ 
Algebra Series I Time is Money | Pitstop II .Apvcnture 
to Atlantis | Feature I Capturing the Hidden Archon 
Editor Core I Fingerprinl Plus; A Review | Beneath 
Bevond Casflc Woffcnstem (part 2) i 



jn«_ _ Sofikeys \ Microzines 1-5 ) Microzines 
7-9 I Microzines {alternate method) | Phi Beta Filer | 
Sword of Kadush 1 Readers ' Sofikeys \ Another Miner 
2049er | Learning With Fuzzvwomp | Bookends 
Apple Logo D I Wfirdcr on die Zinderneuf | Featares 
Daleks; Exploring Artificial IntelliEenee | Making 32K 
or 16K Stave Di^s 1 Core \ The Games of 19S5: part 



5o/ffcv.t I Cannonbail Blitz | Instant 

Recall I Gessler Spanish Software ', More Stiekybears | 
Readm' Sofikeys I Financial Cookbook | Super 
ZaxjLon I Wizardry I Preschool Fun I Holy Grail , 
Inca I 12'8K Zaxxon | Feature \ ProEdit | Core \ Game; 
of 1985 pan I ; 



Sofikeys \ DB Master 4.2 i Business 

Writer , Barron's Computer SAT [ Take 1 I Bank Street 
Speller I Where In The World Is Carmen Sandiego | 
Bank Street Wntcr 128K I Word Challenge | Readers ' 
Sojikevs [Spy's Demise j Mind Prober | BC's Quest For 
Tires 1 Early Games Homeword Siwller | fealiire \ 
Adding IF THEN ELSIE To Applesoft 1 Core \ DOS To 
FroDOS And Back | 



^_ Sofikeys I Electronic Arts software | 

Grolier software j Xyphus i F-15 Strike Eagle [ Injured 
Emm] Readers' Sofikea | Mr. Robot And I lis Robot 
Factory | Applecillin II [Alphabet Zoo | Fathoms 40 I 
Story Maker | Early Games Matchmaker ; Robots Of 
Dawn Feature \ F.ssemial Data Duplicator copy 
parms 1 Core I Direct Sector Access From DOS | .. 



Sofih'\-s J Miner 2W9er | Lode Runner I 

A2-PB1 Pmball | Readers' Sofikeys \ The Heist | Old 
Ironsides | Grandma's House | In Search of the Most 
Amazing Thing J Morloc's Tower I Marauder | Sargon 
III I Features fCfustomized Drive Speed ConUol I Super 
lOB version 1.5 | Core \ The Macro System | 



__ _^ Sopkeys | Sargon ID | Wizardry; Proving 
Grounds of the Mad Overlord and Knight of Diamonds 

Reader ' Sofikeys \ The Report Card VI . 1 Kidwriter 
Feature I Apple ][ Bool ROM Disassembly I Core Tbe 
Graphic Grabber v3.0 i Copv E-t- 5.0: .-V Review | The 
Know-Drive: A Hardware Evaluation | An Improved 
BASIC/Binary Combo | , 



19 Readers' io#ej\T 1 Rendezvous With 
Rama | Peachtree's Back To Basics Accountmg System 
USD SUitislics Series I Aridimetickie Arithmekicks and 
Early Games for Children | Features \ Double Your 
ROM Space [ Towards a Better F8 ROM | The Kibbler: 
A Ulilitv Program to Examine Raw Nibbles From Disk I 
Core i Tlie Games of I9S4; In Review-part II | 



1 G Sofikev I Sensible Speller fur ProDOS 
Sideways I Readeis' Sofike)'s \ Rescue Raiders | Sheda 
Basic Building Blocks 1 Artsci Programs | Crossfire 
Feature I Secret Weapon; RAMcard , Core \ The 
Controller Writer | A Fix For The Beyond Casde 
Wnlfenstein Softkey | The Lone Catalog Arranger 
Part 1 I .■•...-.. 



5^-1 Sofikevs 1 Data Reporter 1 MuUiplan I Zork 
Features j PARMS for Copy II Plus | No More Bugs | 
AFF's for Choplifter & Cannonbail Blit7, 'Copycard' 
Reviews \ Replay [ Crackshot | Snapshot [ Wddcard I 



COMPUTIST PO Box 110846-T Tacoma, WA 98411 



X 



How about ALL of our Super lOB controllers, 
(through 1986) in ONE package! 



COMPUTIST developed the ultimate copy program to 
remove copy protection from software: 

The Super lOB program. 

Since the introduction of Super lOB, COMPUTIST has used 
this flexible program to deprotect (or partially deprotect) 
dozens of commercial programs with far ranging protection 
schemes. 

Super lOB deprotects disks by using a modified RWTS (the 
subroutine in DOS which is responsible for the reading and 
writing of disk sectors) for reading from the protected disk and 
then using a normal RWTS for writing to the deprotected disk. 

This package contains: 

►- TWO DISKS (supplied in DOS 3.3). Each disk contains at least 
60 Super 10B Controllers including the standard, swap, newswap 
and fast controllers. Also included is version 1 .5 of Super JOB, the 
Csaver program from COMPUTIST No. 13, and a Menu Hello 
Program that lists the available controllers and, when you select one, 
automatically installs it in Super JOB and RUNs ttie resulting 
program.* 

>■ A reprint of Disk Inspection and the Use of Super lOB, from 
COMPUTIST No. 17. This article explains how to write your own 
Super lOB controllers. 

>- COMPUTIST No, 32, which contains an extensive article detailing 
the hows and whys of Super lOB v1.5 and at least 5 articles using 
the new Super lOB program. 

• Several of the controllers deprotect the software completely with 
no further steps. This means that some programs are only minutes 
away from deprotection (with virtually no typing). 

• The issue of COMPUTIST in which each controller appeared 
is indicated in case further steps are required to deprotect a particular 
program,** 



The SUPER lOB Collection 

Volume 1 of the Supsr lOB collection covers all the controllers from 
COMPUTIST No. 9 through No. 26. Also Included are the newswap and 
fast controllers Irom COI^PUTIST No. 32, The following SO controllers are 
on volume 1: 

Advanced Blackjack, Alphabet Zoo, Arcade Machine, Archon II, 

Afchon. Ansci Software, Bank Street Writer, Barrens SAT, Beyond 

Castle Woltenstein. BSW lie Loader, Castle Wolfenstein. Computer 

Prepafatlon: SAT, Dazzle Draw, DB Master 4 Plus. Death In the 

Carrlbean, Dino Eggs, DLM Software, Electronic Arts, F-15 Strike 

Eagle. Fast Controller. Fathoms 40, Financial Cookbook. Gessler 

Software, Grandrrsa's House, The Heist, In Search of the Most 

Amazing Thing, Instant Recall, Kidwriter. Lions Share, Lode 

Runner. Mastertype, Match Maker, Miner 2049er, Mintt Man, 

Mufplol, Newsroom, Newswap controller. Penguin Software, Prim 

Shop Graphic Library, Print Shop, Rendezvous with Rama, Rockys' 

Boots, Sargon III. Sea Dragon, S hie la. Skyfox, Snooper Troops, 

Standard controller, Stoneware Software, Summer Games, Super 

Controller, Super Zasoion, Swap Controtiat, TAC, Ultima I II, Word 

Challenge, Xyphus, Zaxxon 

Vol U me 2 of the Super lOB collection covers all the controllers from 
COMPUTIST No. 27 through No. 38, Tfie following 65 controllers are on 
volume 2: 

Alice in Wonderland, Alphabetic Keyboarding, Alternate Reality, 

Autoduel. Checkers, Chipwits, Color Me, Conan.dafa, Conan.prog, 

CopyDOS, Crisis Mountain, Disk Director, Dragonworid, Early 

Games, Easy as ABC, F-15 Strike Eagle, Fantavlsion, Fast 

controller, Fishies, Flight Simulator, Halley Project, Hartley Software 

(a), Hartley Software (b). Jenny of the Praria, Jingle Disk, Kidwriter, 

Kracking Vol II. Lode Runner. LOGO II (a). LOGO tl (b). 
Masquerade, Mastering ihs SAT, MIcrotype: The Wonderful World 
of Paws, Microzlnes 1 , Microzlnes 2-5. Miner 2049er, Mist & View 

lo a Kill, Murder on the Zinderneuf, Music Construction Set, 

Newswap controller, Olympic Decathlon, Other Side, Phi Beta Filer, 

Pitstop II, Prim Shop Companion, RDOS. Robot War. Spy vs Spy, 

Standard controller, Sundog V2, Swap controller, Sword of Kadash. 

Synergistic Software, Tawala's last Redoubt, Terripin Logo, 

Threshold, Time is Money, Time Zone, Tink! TonkI, Troll's Tale, 

Ultima IV, Wilderness, Word Attack & Classmate. World's Greatest 

Baseball, World's Greatest Football 



D Yes, please send me The Super lOB Collection 

Includes both disks with Super lOB version 1,5, 
COMPUTISTiS!32, PLUS a reprint of "Disl; Inspection and 
the Use of Super lOB". 

D US/Canada/Mexico for $16 00 
n Other Foreign for $20.00 

Send to: Super lOB Collection 

PO Box 110846-T 
Tacoma, WA 98411 

(206) 474-5750 



* Requires at least 64K of memory. 

**Alttiough some controllei^ will completely deprotect the program 

they were designed for, some will not, and therefore require their 

corresponding issue of COMPUTIST to complete the deprotection 

procedure. 



Name. 



Address 
City 



Country 



Signature 



State 



Zip 



Phone 



Exp.. 



CP4S 



Most orders are shipped within 5 working days, however, please allow 
4 to 6 weeks for delivery. Washington residents^ please add 7.8% sales tax. 

US funds drawn on US tianlu 



